Skip to content

Class: DiscoveryDetails

The Discovery Details object describes results of a discovery task/job.

URI: ocsf:DiscoveryDetails

 classDiagram
    class DiscoveryDetails
    click DiscoveryDetails href "../DiscoveryDetails/"
      Object <|-- DiscoveryDetails
        click Object href "../Object/"

      DiscoveryDetails : count

      DiscoveryDetails : occurrence_details





        DiscoveryDetails --> "0..1" OccurrenceDetails : occurrence_details
        click OccurrenceDetails href "../OccurrenceDetails/"



      DiscoveryDetails : occurrences





        DiscoveryDetails --> "*" OccurrenceDetails : occurrences
        click OccurrenceDetails href "../OccurrenceDetails/"



      DiscoveryDetails : type

      DiscoveryDetails : value

Inheritance

Slots

Name Cardinality and Range Description Inheritance
count 0..1 recommended
Integer		 The number of discovered entities of the specified type direct
occurrence_details 0..1
OccurrenceDetails		 Details about where in the target entity, specified information was discovere... direct
occurrences *
OccurrenceDetails		 Details about where in the target entity, specified information was discovere... direct
type 0..1 recommended
String		 The specific type of information that was discovered direct
value 0..1
String		 Optionally, the specific value of discovered information direct

Usages

used by used in type used
DataClassification discovery_details range DiscoveryDetails
DataSecurity discovery_details range DiscoveryDetails

In Subsets

Aliases

  • Discovery Details

Identifier and Mapping Information

Schema Source

Mappings

Mapping Type Mapped Value
self ocsf:DiscoveryDetails
native ocsf:DiscoveryDetails

LinkML Source

Direct

name: DiscoveryDetails
description: The Discovery Details object describes results of a discovery task/job.
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Discovery Details
is_a: Object
slots:
- count
- occurrence_details
- occurrences
- type
- value
slot_usage:
  count:
    name: count
    description: The number of discovered entities of the specified type.
    recommended: true
  occurrence_details:
    name: occurrence_details
    description: 'Details about where in the target entity, specified information
      was discovered.

      Only the attributes, relevant to the target entity type should be populated.'
    deprecated: Use <code>occurrences</code> instead.
  occurrences:
    name: occurrences
    description: 'Details about where in the target entity, specified information
      was discovered.

      Only the attributes, relevant to the target entity type should be populated.'
  type:
    name: type
    description: 'The specific type of information that was discovered. e.g.<code>
      name,

      phone_number, etc.</code>'
    recommended: true
  value:
    name: value
    description: Optionally, the specific value of discovered information.

Induced

name: DiscoveryDetails
description: The Discovery Details object describes results of a discovery task/job.
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Discovery Details
is_a: Object
slot_usage:
  count:
    name: count
    description: The number of discovered entities of the specified type.
    recommended: true
  occurrence_details:
    name: occurrence_details
    description: 'Details about where in the target entity, specified information
      was discovered.

      Only the attributes, relevant to the target entity type should be populated.'
    deprecated: Use <code>occurrences</code> instead.
  occurrences:
    name: occurrences
    description: 'Details about where in the target entity, specified information
      was discovered.

      Only the attributes, relevant to the target entity type should be populated.'
  type:
    name: type
    description: 'The specific type of information that was discovered. e.g.<code>
      name,

      phone_number, etc.</code>'
    recommended: true
  value:
    name: value
    description: Optionally, the specific value of discovered information.
attributes:
  count:
    name: count
    description: The number of discovered entities of the specified type.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Count
    rank: 1000
    alias: count
    owner: DiscoveryDetails
    domain_of:
    - Observation
    - RelatedEvent
    - Session
    - DiscoveryDetails
    - UnmannedSystemOperatingArea
    - BaseEvent
    range: integer
    recommended: true
  occurrence_details:
    name: occurrence_details
    description: 'Details about where in the target entity, specified information
      was discovered.

      Only the attributes, relevant to the target entity type should be populated.'
    deprecated: Use <code>occurrences</code> instead.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Occurrence Details
    rank: 1000
    alias: occurrence_details
    owner: DiscoveryDetails
    domain_of:
    - DiscoveryDetails
    range: OccurrenceDetails
  occurrences:
    name: occurrences
    description: 'Details about where in the target entity, specified information
      was discovered.

      Only the attributes, relevant to the target entity type should be populated.'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Occurrences
    rank: 1000
    alias: occurrences
    owner: DiscoveryDetails
    domain_of:
    - DiscoveryDetails
    range: OccurrenceDetails
    multivalued: true
  type:
    name: type
    description: 'The specific type of information that was discovered. e.g.<code>
      name,

      phone_number, etc.</code>'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Type
    rank: 1000
    alias: type
    owner: DiscoveryDetails
    domain_of:
    - AnalysisTarget
    - Observable
    - Os
    - Osint
    - Package
    - PrivilegeInfo
    - ProgrammaticCredential
    - RelatedEvent
    - San
    - Sbom
    - Script
    - SoftwareComponent
    - StartupItem
    - ThreatActor
    - Ticket
    - Timespan
    - TlsExtension
    - Token
    - Dns
    - Resource
    - Account
    - Agent
    - Analytic
    - ApplicationObject
    - AuthenticationToken
    - ClassifierDetails
    - Cve
    - Database
    - Databucket
    - DiscoveryDetails
    - DnsAnswer
    - DomainContact
    - EncryptionDetails
    - Endpoint
    - Enrichment
    - File
    - Graph
    - Group
    - Ja4Fingerprint
    - Kernel
    - ManagedEntity
    - Metadata
    - Module
    - NetworkEndpoint
    - NetworkInterface
    - Node
    - PeripheralDevice
    - Policy
    - Rule
    - Scan
    - Trait
    - UnmannedAerialSystem
    - UnmannedSystemOperatingArea
    - User
    - WebResource
    - Device
    - DatastoreActivity
    - FtpActivity
    - RegValue
    - WinResource
    range: string
    recommended: true
  value:
    name: value
    description: Optionally, the specific value of discovered information.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Value
    rank: 1000
    alias: value
    owner: DiscoveryDetails
    domain_of:
    - Observable
    - Observation
    - Osint
    - Packet
    - DiscoveryDetails
    - Enrichment
    - EnvironmentVariable
    - Fingerprint
    - HttpCookie
    - HttpHeader
    - Ja4Fingerprint
    - KeyValueObject
    - LongString
    - Metric
    range: string