Skip to content

Class: Database

The database object is used for databases which are typically datastore

services that contain an organized collection of structured and unstructured

data or a types of data.

URI: ocsf:Database

 classDiagram
    class Database
    click Database href "../Database/"
      DataClassificationProfile <|-- Database
        click DataClassificationProfile href "../DataClassificationProfile/"
      Entity <|-- Database
        click Entity href "../Entity/"

      Database : created_time

      Database : data_classification





        Database --> "0..1 _recommended_" DataClassification : data_classification
        click DataClassification href "../DataClassification/"



      Database : data_classifications





        Database --> "* _recommended_" DataClassification : data_classifications
        click DataClassification href "../DataClassification/"



      Database : desc

      Database : embedding_model

      Database : groups





        Database --> "*" Group : groups
        click Group href "../Group/"



      Database : modified_time

      Database : name

      Database : size

      Database : type

      Database : type_id





        Database --> "1" DatabaseTypeIdEnum : type_id
        click DatabaseTypeIdEnum href "../DatabaseTypeIdEnum/"



      Database : uid

Inheritance

Slots

Name Cardinality and Range Description Inheritance
created_time 0..1
TimestampT
The time when the database was known to have been created direct
desc 0..1
String
The description of the database direct
embedding_model 0..1
String
Model used for creating embeddings (if applicable) direct
groups *
Group
The group names to which the database belongs direct
modified_time 0..1
TimestampT
The most recent time when any changes, updates, or modifications were made direct
name 0..1 recommended
String
The database name, ordinarily as assigned by a database administrator direct
size 0..1
Integer
The size of the database in bytes direct
type 0..1 recommended
String
The database type direct
type_id 1
DatabaseTypeIdEnum
The normalized identifier of the database type direct
uid 0..1 recommended
String
The unique identifier of the database direct
data_classification 0..1 recommended
DataClassification
The Data Classification object includes information about data classification DataClassificationProfile
data_classifications * recommended
DataClassification
A list of Data Classification objects, that include information about data DataClassificationProfile

Usages

used by used in type used
Evidences database range Database
DatastoreActivity database range Database
CloudResourcesInventoryInfo database range Database
DataSecurityFinding database range Database
WindowsEvidences database range Database

In Subsets

Aliases

  • Database

See Also

Notes

Identifier and Mapping Information

Schema Source

Mappings

Mapping Type Mapped Value
self ocsf:Database
native ocsf:Database

LinkML Source

Direct

name: Database
description: 'The database object is used for databases which are typically datastore

  services that contain an organized collection of structured and unstructured

  data or a types of data.'
notes:
- 'D3FEND™ Ontology d3f:Database. 

  https://d3fend.mitre.org/dao/artifact/d3f:Database/'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
see_also:
- https://d3fend.mitre.org/dao/artifact/d3f:Database/
aliases:
- Database
is_a: Entity
mixins:
- DataClassificationProfile
slots:
- created_time
- desc
- embedding_model
- groups
- modified_time
- name
- size
- type
- type_id
- uid
slot_usage:
  created_time:
    name: created_time
    description: The time when the database was known to have been created.
  desc:
    name: desc
    description: The description of the database.
  embedding_model:
    name: embedding_model
    description: 'Model used for creating embeddings (if applicable). For example:

      <code>text-embedding-ada-002</code> or <code>all-MiniLM-L6-v2</code>.'
  groups:
    name: groups
    description: The group names to which the database belongs.
  modified_time:
    name: modified_time
    description: 'The most recent time when any changes, updates, or modifications
      were made

      within the database.'
  name:
    name: name
    description: The database name, ordinarily as assigned by a database administrator.
  size:
    name: size
    description: The size of the database in bytes.
  type:
    name: type
    description: The database type.
    recommended: true
  type_id:
    name: type_id
    description: The normalized identifier of the database type.
    range: DatabaseTypeIdEnum
    required: true
  uid:
    name: uid
    description: The unique identifier of the database.

Induced

name: Database
description: 'The database object is used for databases which are typically datastore

  services that contain an organized collection of structured and unstructured

  data or a types of data.'
notes:
- 'D3FEND™ Ontology d3f:Database. 

  https://d3fend.mitre.org/dao/artifact/d3f:Database/'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
see_also:
- https://d3fend.mitre.org/dao/artifact/d3f:Database/
aliases:
- Database
is_a: Entity
mixins:
- DataClassificationProfile
slot_usage:
  created_time:
    name: created_time
    description: The time when the database was known to have been created.
  desc:
    name: desc
    description: The description of the database.
  embedding_model:
    name: embedding_model
    description: 'Model used for creating embeddings (if applicable). For example:

      <code>text-embedding-ada-002</code> or <code>all-MiniLM-L6-v2</code>.'
  groups:
    name: groups
    description: The group names to which the database belongs.
  modified_time:
    name: modified_time
    description: 'The most recent time when any changes, updates, or modifications
      were made

      within the database.'
  name:
    name: name
    description: The database name, ordinarily as assigned by a database administrator.
  size:
    name: size
    description: The size of the database in bytes.
  type:
    name: type
    description: The database type.
    recommended: true
  type_id:
    name: type_id
    description: The normalized identifier of the database type.
    range: DatabaseTypeIdEnum
    required: true
  uid:
    name: uid
    description: The unique identifier of the database.
attributes:
  created_time:
    name: created_time
    description: The time when the database was known to have been created.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Created Time
    rank: 1000
    alias: created_time
    owner: Database
    domain_of:
    - Osint
    - RelatedEvent
    - Sbom
    - Scim
    - Session
    - Sso
    - Token
    - Whois
    - Resource
    - Advisory
    - AuthenticationToken
    - Certificate
    - Cve
    - Database
    - Databucket
    - DigitalSignature
    - Enrichment
    - Epss
    - File
    - FindingObject
    - FindingInfo
    - Job
    - KbArticle
    - LdapPerson
    - ProcessEntity
    - Table
    - Device
    range: TimestampT
  desc:
    name: desc
    description: The description of the database.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Description
    rank: 1000
    alias: desc
    owner: Database
    domain_of:
    - Osint
    - RelatedEvent
    - Remediation
    - Vulnerability
    - Advisory
    - Analytic
    - ApplicationObject
    - Assessment
    - Check
    - CisBenchmark
    - CisBenchmarkResult
    - CisControl
    - Compliance
    - Cve
    - Database
    - Databucket
    - Enrichment
    - File
    - FindingObject
    - FindingInfo
    - Graph
    - Group
    - Job
    - Location
    - Node
    - Policy
    - Rule
    - Table
    - WebResource
    - Device
    - IncidentFinding
    range: string
  embedding_model:
    name: embedding_model
    description: 'Model used for creating embeddings (if applicable). For example:

      <code>text-embedding-ada-002</code> or <code>all-MiniLM-L6-v2</code>.'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Embedding Model
    rank: 1000
    alias: embedding_model
    owner: Database
    domain_of:
    - Database
    range: string
  groups:
    name: groups
    description: The group names to which the database belongs.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Groups
    rank: 1000
    alias: groups
    owner: Database
    domain_of:
    - Database
    - Databucket
    - Table
    - User
    - Device
    range: Group
    multivalued: true
  modified_time:
    name: modified_time
    description: 'The most recent time when any changes, updates, or modifications
      were made

      within the database.'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Modified Time
    rank: 1000
    alias: modified_time
    owner: Database
    domain_of:
    - Osint
    - RelatedEvent
    - Scim
    - Sso
    - Token
    - Resource
    - Advisory
    - Cve
    - Database
    - Databucket
    - File
    - FindingObject
    - FindingInfo
    - LdapPerson
    - Metadata
    - Table
    - Device
    - RegKey
    - RegValue
    range: TimestampT
  name:
    name: name
    description: The database name, ordinarily as assigned by a database administrator.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Name
    rank: 1000
    alias: name
    owner: Database
    domain_of:
    - AnalysisTarget
    - Observable
    - Os
    - Osint
    - Package
    - Parameter
    - PrivilegeInfo
    - San
    - Scim
    - Script
    - ServicePrivilegeAnalysis
    - SoftwareComponent
    - Sso
    - StartupItem
    - ThreatActor
    - Token
    - Entity
    - Resource
    - Account
    - Agent
    - AiModel
    - Aircraft
    - Analytic
    - ApplicationObject
    - Assessment
    - AutonomousSystem
    - Campaign
    - Check
    - CisBenchmark
    - CisBenchmarkResult
    - CisControl
    - ClassifierDetails
    - Container
    - D3fTactic
    - D3fTechnique
    - Database
    - Databucket
    - DomainContact
    - Edge
    - Endpoint
    - Enrichment
    - EnvironmentVariable
    - Evidences
    - Extension
    - Feature
    - File
    - Graph
    - Group
    - HttpCookie
    - HttpHeader
    - Idp
    - Image
    - Job
    - Kernel
    - KeyValueObject
    - LoadBalancer
    - Logger
    - Malware
    - ManagedEntity
    - MessageContext
    - Metric
    - Mitigation
    - NetworkInterface
    - Node
    - Organization
    - PeripheralDevice
    - Policy
    - ProcessEntity
    - Product
    - QueryInfo
    - Reporter
    - ResourceDetails
    - Rule
    - Scan
    - Service
    - SubTechnique
    - Table
    - Tactic
    - Technique
    - Trait
    - TransformationInfo
    - UnmannedAerialSystem
    - User
    - WebResource
    - Device
    - FtpActivity
    - RegValue
    - WinResource
    - WinService
    - PrefetchQuery
    range: string
    recommended: true
  size:
    name: size
    description: The size of the database in bytes.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Size
    rank: 1000
    alias: size
    owner: Database
    domain_of:
    - Advisory
    - Container
    - DataClassification
    - Database
    - Databucket
    - Email
    - File
    - KbArticle
    - Table
    - MalwareScanInfo
    - MemoryActivity
    range: integer
  type:
    name: type
    description: The database type.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Type
    rank: 1000
    alias: type
    owner: Database
    domain_of:
    - AnalysisTarget
    - Observable
    - Os
    - Osint
    - Package
    - PrivilegeInfo
    - ProgrammaticCredential
    - RelatedEvent
    - San
    - Sbom
    - Script
    - SoftwareComponent
    - StartupItem
    - ThreatActor
    - Ticket
    - Timespan
    - TlsExtension
    - Token
    - Dns
    - Resource
    - Account
    - Agent
    - Analytic
    - ApplicationObject
    - AuthenticationToken
    - ClassifierDetails
    - Cve
    - Database
    - Databucket
    - DiscoveryDetails
    - DnsAnswer
    - DomainContact
    - EncryptionDetails
    - Endpoint
    - Enrichment
    - File
    - Graph
    - Group
    - Ja4Fingerprint
    - Kernel
    - ManagedEntity
    - Metadata
    - Module
    - NetworkEndpoint
    - NetworkInterface
    - Node
    - PeripheralDevice
    - Policy
    - Rule
    - Scan
    - Trait
    - UnmannedAerialSystem
    - UnmannedSystemOperatingArea
    - User
    - WebResource
    - Device
    - DatastoreActivity
    - FtpActivity
    - RegValue
    - WinResource
    range: string
    recommended: true
  type_id:
    name: type_id
    annotations:
      sibling:
        tag: sibling
        value: type
    description: The normalized identifier of the database type.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Type ID
    rank: 1000
    alias: type_id
    owner: Database
    domain_of:
    - Observable
    - Os
    - Osint
    - Package
    - PrivilegeInfo
    - Sbom
    - Script
    - SoftwareComponent
    - StartupItem
    - ThreatActor
    - Ticket
    - Timespan
    - TlsExtension
    - Token
    - Account
    - Agent
    - Analytic
    - AuthenticationToken
    - Database
    - Databucket
    - DomainContact
    - Endpoint
    - File
    - Ja4Fingerprint
    - Kernel
    - ManagedEntity
    - NetworkEndpoint
    - NetworkInterface
    - PeripheralDevice
    - Scan
    - UnmannedAerialSystem
    - UnmannedSystemOperatingArea
    - User
    - Device
    - DatastoreActivity
    - RegValue
    - WinResource
    range: DatabaseTypeIdEnum
    required: true
  uid:
    name: uid
    description: The unique identifier of the database.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Unique ID
    rank: 1000
    alias: uid
    owner: Database
    domain_of:
    - Osint
    - Package
    - ProgrammaticCredential
    - RelatedEvent
    - Request
    - Sbom
    - Scim
    - Script
    - Session
    - Span
    - Sso
    - Ticket
    - Token
    - Trace
    - Entity
    - Resource
    - Account
    - Advisory
    - Agent
    - AiModel
    - Aircraft
    - Analytic
    - ApplicationObject
    - Assessment
    - Certificate
    - Check
    - ClassifierDetails
    - Container
    - Cve
    - Cwe
    - D3fTactic
    - D3fTechnique
    - DataClassification
    - Database
    - Databucket
    - DomainContact
    - Edge
    - Email
    - Endpoint
    - Evidences
    - Extension
    - Feature
    - File
    - FindingObject
    - FindingInfo
    - Graph
    - Group
    - HttpRequest
    - Idp
    - Image
    - KbArticle
    - LoadBalancer
    - Logger
    - Malware
    - ManagedEntity
    - MessageContext
    - Metadata
    - Mitigation
    - NetworkConnectionInfo
    - NetworkEndpoint
    - NetworkInterface
    - Node
    - Organization
    - PeripheralDevice
    - Policy
    - ProcessEntity
    - Product
    - QueryInfo
    - Reporter
    - Rule
    - Scan
    - Service
    - SubTechnique
    - Table
    - Tactic
    - Technique
    - Trait
    - TransformationInfo
    - UnmannedAerialSystem
    - User
    - WebResource
    - Device
    - WinResource
    range: string
    recommended: true
  data_classification:
    name: data_classification
    annotations:
      group:
        tag: group
        value: context
    description: 'The Data Classification object includes information about data classification

      levels and data category types.'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Data Classification
    rank: 1000
    alias: data_classification
    owner: Database
    domain_of:
    - DataClassificationProfile
    range: DataClassification
    recommended: true
  data_classifications:
    name: data_classifications
    annotations:
      group:
        tag: group
        value: context
    description: 'A list of Data Classification objects, that include information
      about data

      classification levels and data category types, identified by a classifier.'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Data Classification
    rank: 1000
    alias: data_classifications
    owner: Database
    domain_of:
    - DataClassificationProfile
    range: DataClassification
    recommended: true
    multivalued: true