Class: Database
The database object is used for databases which are typically datastore
services that contain an organized collection of structured and unstructured
data or a types of data.
URI: ocsf:Database
classDiagram
class Database
click Database href "../Database/"
DataClassificationProfile <|-- Database
click DataClassificationProfile href "../DataClassificationProfile/"
Entity <|-- Database
click Entity href "../Entity/"
Database : created_time
Database : data_classification
Database --> "0..1 _recommended_" DataClassification : data_classification
click DataClassification href "../DataClassification/"
Database : data_classifications
Database --> "* _recommended_" DataClassification : data_classifications
click DataClassification href "../DataClassification/"
Database : desc
Database : embedding_model
Database : groups
Database --> "*" Group : groups
click Group href "../Group/"
Database : modified_time
Database : name
Database : size
Database : type
Database : type_id
Database --> "1" DatabaseTypeIdEnum : type_id
click DatabaseTypeIdEnum href "../DatabaseTypeIdEnum/"
Database : uid
Inheritance
- OcsfObject
- Object
- Entity
- Database [ DataClassificationProfile]
- Entity
- Object
Slots
| Name | Cardinality and Range | Description | Inheritance |
|---|---|---|---|
| created_time | 0..1 TimestampT |
The time when the database was known to have been created | direct |
| desc | 0..1 String |
The description of the database | direct |
| embedding_model | 0..1 String |
Model used for creating embeddings (if applicable) | direct |
| groups | * Group |
The group names to which the database belongs | direct |
| modified_time | 0..1 TimestampT |
The most recent time when any changes, updates, or modifications were made | direct |
| name | 0..1 recommended String |
The database name, ordinarily as assigned by a database administrator | direct |
| size | 0..1 Integer |
The size of the database in bytes | direct |
| type | 0..1 recommended String |
The database type | direct |
| type_id | 1 DatabaseTypeIdEnum |
The normalized identifier of the database type | direct |
| uid | 0..1 recommended String |
The unique identifier of the database | direct |
| data_classification | 0..1 recommended DataClassification |
The Data Classification object includes information about data classification | DataClassificationProfile |
| data_classifications | * recommended DataClassification |
A list of Data Classification objects, that include information about data | DataClassificationProfile |
Usages
| used by | used in | type | used |
|---|---|---|---|
| Evidences | database | range | Database |
| DatastoreActivity | database | range | Database |
| CloudResourcesInventoryInfo | database | range | Database |
| DataSecurityFinding | database | range | Database |
| WindowsEvidences | database | range | Database |
In Subsets
Aliases
- Database
See Also
Notes
- D3FEND™ Ontology d3f:Database. — https://d3fend.mitre.org/dao/artifact/d3f:Database/
Identifier and Mapping Information
Schema Source
- from schema: https://w3id.org/lmodel/ocsf
Mappings
| Mapping Type | Mapped Value |
|---|---|
| self | ocsf:Database |
| native | ocsf:Database |
LinkML Source
Direct
name: Database
description: 'The database object is used for databases which are typically datastore
services that contain an organized collection of structured and unstructured
data or a types of data.'
notes:
- 'D3FEND™ Ontology d3f:Database. —
https://d3fend.mitre.org/dao/artifact/d3f:Database/'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
see_also:
- https://d3fend.mitre.org/dao/artifact/d3f:Database/
aliases:
- Database
is_a: Entity
mixins:
- DataClassificationProfile
slots:
- created_time
- desc
- embedding_model
- groups
- modified_time
- name
- size
- type
- type_id
- uid
slot_usage:
created_time:
name: created_time
description: The time when the database was known to have been created.
desc:
name: desc
description: The description of the database.
embedding_model:
name: embedding_model
description: 'Model used for creating embeddings (if applicable). For example:
<code>text-embedding-ada-002</code> or <code>all-MiniLM-L6-v2</code>.'
groups:
name: groups
description: The group names to which the database belongs.
modified_time:
name: modified_time
description: 'The most recent time when any changes, updates, or modifications
were made
within the database.'
name:
name: name
description: The database name, ordinarily as assigned by a database administrator.
size:
name: size
description: The size of the database in bytes.
type:
name: type
description: The database type.
recommended: true
type_id:
name: type_id
description: The normalized identifier of the database type.
range: DatabaseTypeIdEnum
required: true
uid:
name: uid
description: The unique identifier of the database.
Induced
name: Database
description: 'The database object is used for databases which are typically datastore
services that contain an organized collection of structured and unstructured
data or a types of data.'
notes:
- 'D3FEND™ Ontology d3f:Database. —
https://d3fend.mitre.org/dao/artifact/d3f:Database/'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
see_also:
- https://d3fend.mitre.org/dao/artifact/d3f:Database/
aliases:
- Database
is_a: Entity
mixins:
- DataClassificationProfile
slot_usage:
created_time:
name: created_time
description: The time when the database was known to have been created.
desc:
name: desc
description: The description of the database.
embedding_model:
name: embedding_model
description: 'Model used for creating embeddings (if applicable). For example:
<code>text-embedding-ada-002</code> or <code>all-MiniLM-L6-v2</code>.'
groups:
name: groups
description: The group names to which the database belongs.
modified_time:
name: modified_time
description: 'The most recent time when any changes, updates, or modifications
were made
within the database.'
name:
name: name
description: The database name, ordinarily as assigned by a database administrator.
size:
name: size
description: The size of the database in bytes.
type:
name: type
description: The database type.
recommended: true
type_id:
name: type_id
description: The normalized identifier of the database type.
range: DatabaseTypeIdEnum
required: true
uid:
name: uid
description: The unique identifier of the database.
attributes:
created_time:
name: created_time
description: The time when the database was known to have been created.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Created Time
rank: 1000
alias: created_time
owner: Database
domain_of:
- Osint
- RelatedEvent
- Sbom
- Scim
- Session
- Sso
- Token
- Whois
- Resource
- Advisory
- AuthenticationToken
- Certificate
- Cve
- Database
- Databucket
- DigitalSignature
- Enrichment
- Epss
- File
- FindingObject
- FindingInfo
- Job
- KbArticle
- LdapPerson
- ProcessEntity
- Table
- Device
range: TimestampT
desc:
name: desc
description: The description of the database.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Description
rank: 1000
alias: desc
owner: Database
domain_of:
- Osint
- RelatedEvent
- Remediation
- Vulnerability
- Advisory
- Analytic
- ApplicationObject
- Assessment
- Check
- CisBenchmark
- CisBenchmarkResult
- CisControl
- Compliance
- Cve
- Database
- Databucket
- Enrichment
- File
- FindingObject
- FindingInfo
- Graph
- Group
- Job
- Location
- Node
- Policy
- Rule
- Table
- WebResource
- Device
- IncidentFinding
range: string
embedding_model:
name: embedding_model
description: 'Model used for creating embeddings (if applicable). For example:
<code>text-embedding-ada-002</code> or <code>all-MiniLM-L6-v2</code>.'
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Embedding Model
rank: 1000
alias: embedding_model
owner: Database
domain_of:
- Database
range: string
groups:
name: groups
description: The group names to which the database belongs.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Groups
rank: 1000
alias: groups
owner: Database
domain_of:
- Database
- Databucket
- Table
- User
- Device
range: Group
multivalued: true
modified_time:
name: modified_time
description: 'The most recent time when any changes, updates, or modifications
were made
within the database.'
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Modified Time
rank: 1000
alias: modified_time
owner: Database
domain_of:
- Osint
- RelatedEvent
- Scim
- Sso
- Token
- Resource
- Advisory
- Cve
- Database
- Databucket
- File
- FindingObject
- FindingInfo
- LdapPerson
- Metadata
- Table
- Device
- RegKey
- RegValue
range: TimestampT
name:
name: name
description: The database name, ordinarily as assigned by a database administrator.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Name
rank: 1000
alias: name
owner: Database
domain_of:
- AnalysisTarget
- Observable
- Os
- Osint
- Package
- Parameter
- PrivilegeInfo
- San
- Scim
- Script
- ServicePrivilegeAnalysis
- SoftwareComponent
- Sso
- StartupItem
- ThreatActor
- Token
- Entity
- Resource
- Account
- Agent
- AiModel
- Aircraft
- Analytic
- ApplicationObject
- Assessment
- AutonomousSystem
- Campaign
- Check
- CisBenchmark
- CisBenchmarkResult
- CisControl
- ClassifierDetails
- Container
- D3fTactic
- D3fTechnique
- Database
- Databucket
- DomainContact
- Edge
- Endpoint
- Enrichment
- EnvironmentVariable
- Evidences
- Extension
- Feature
- File
- Graph
- Group
- HttpCookie
- HttpHeader
- Idp
- Image
- Job
- Kernel
- KeyValueObject
- LoadBalancer
- Logger
- Malware
- ManagedEntity
- MessageContext
- Metric
- Mitigation
- NetworkInterface
- Node
- Organization
- PeripheralDevice
- Policy
- ProcessEntity
- Product
- QueryInfo
- Reporter
- ResourceDetails
- Rule
- Scan
- Service
- SubTechnique
- Table
- Tactic
- Technique
- Trait
- TransformationInfo
- UnmannedAerialSystem
- User
- WebResource
- Device
- FtpActivity
- RegValue
- WinResource
- WinService
- PrefetchQuery
range: string
recommended: true
size:
name: size
description: The size of the database in bytes.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Size
rank: 1000
alias: size
owner: Database
domain_of:
- Advisory
- Container
- DataClassification
- Database
- Databucket
- Email
- File
- KbArticle
- Table
- MalwareScanInfo
- MemoryActivity
range: integer
type:
name: type
description: The database type.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Type
rank: 1000
alias: type
owner: Database
domain_of:
- AnalysisTarget
- Observable
- Os
- Osint
- Package
- PrivilegeInfo
- ProgrammaticCredential
- RelatedEvent
- San
- Sbom
- Script
- SoftwareComponent
- StartupItem
- ThreatActor
- Ticket
- Timespan
- TlsExtension
- Token
- Dns
- Resource
- Account
- Agent
- Analytic
- ApplicationObject
- AuthenticationToken
- ClassifierDetails
- Cve
- Database
- Databucket
- DiscoveryDetails
- DnsAnswer
- DomainContact
- EncryptionDetails
- Endpoint
- Enrichment
- File
- Graph
- Group
- Ja4Fingerprint
- Kernel
- ManagedEntity
- Metadata
- Module
- NetworkEndpoint
- NetworkInterface
- Node
- PeripheralDevice
- Policy
- Rule
- Scan
- Trait
- UnmannedAerialSystem
- UnmannedSystemOperatingArea
- User
- WebResource
- Device
- DatastoreActivity
- FtpActivity
- RegValue
- WinResource
range: string
recommended: true
type_id:
name: type_id
annotations:
sibling:
tag: sibling
value: type
description: The normalized identifier of the database type.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Type ID
rank: 1000
alias: type_id
owner: Database
domain_of:
- Observable
- Os
- Osint
- Package
- PrivilegeInfo
- Sbom
- Script
- SoftwareComponent
- StartupItem
- ThreatActor
- Ticket
- Timespan
- TlsExtension
- Token
- Account
- Agent
- Analytic
- AuthenticationToken
- Database
- Databucket
- DomainContact
- Endpoint
- File
- Ja4Fingerprint
- Kernel
- ManagedEntity
- NetworkEndpoint
- NetworkInterface
- PeripheralDevice
- Scan
- UnmannedAerialSystem
- UnmannedSystemOperatingArea
- User
- Device
- DatastoreActivity
- RegValue
- WinResource
range: DatabaseTypeIdEnum
required: true
uid:
name: uid
description: The unique identifier of the database.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Unique ID
rank: 1000
alias: uid
owner: Database
domain_of:
- Osint
- Package
- ProgrammaticCredential
- RelatedEvent
- Request
- Sbom
- Scim
- Script
- Session
- Span
- Sso
- Ticket
- Token
- Trace
- Entity
- Resource
- Account
- Advisory
- Agent
- AiModel
- Aircraft
- Analytic
- ApplicationObject
- Assessment
- Certificate
- Check
- ClassifierDetails
- Container
- Cve
- Cwe
- D3fTactic
- D3fTechnique
- DataClassification
- Database
- Databucket
- DomainContact
- Edge
- Email
- Endpoint
- Evidences
- Extension
- Feature
- File
- FindingObject
- FindingInfo
- Graph
- Group
- HttpRequest
- Idp
- Image
- KbArticle
- LoadBalancer
- Logger
- Malware
- ManagedEntity
- MessageContext
- Metadata
- Mitigation
- NetworkConnectionInfo
- NetworkEndpoint
- NetworkInterface
- Node
- Organization
- PeripheralDevice
- Policy
- ProcessEntity
- Product
- QueryInfo
- Reporter
- Rule
- Scan
- Service
- SubTechnique
- Table
- Tactic
- Technique
- Trait
- TransformationInfo
- UnmannedAerialSystem
- User
- WebResource
- Device
- WinResource
range: string
recommended: true
data_classification:
name: data_classification
annotations:
group:
tag: group
value: context
description: 'The Data Classification object includes information about data classification
levels and data category types.'
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Data Classification
rank: 1000
alias: data_classification
owner: Database
domain_of:
- DataClassificationProfile
range: DataClassification
recommended: true
data_classifications:
name: data_classifications
annotations:
group:
tag: group
value: context
description: 'A list of Data Classification objects, that include information
about data
classification levels and data category types, identified by a classifier.'
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Data Classification
rank: 1000
alias: data_classifications
owner: Database
domain_of:
- DataClassificationProfile
range: DataClassification
recommended: true
multivalued: true