Skip to content

Class: Fingerprint

The Fingerprint object provides detailed information about a fingerprint, which

is a compact representation of data used to identify a longer piece of

information, such as a public key, file content, or application implementation.

It contains the algorithm or scheme and value of the fingerprint, enabling

efficient and reliable identification of the associated data.

URI: ocsf:Fingerprint

 classDiagram
    class Fingerprint
    click Fingerprint href "../Fingerprint/"
      Object <|-- Fingerprint
        click Object href "../Object/"

      Fingerprint : algorithm

      Fingerprint : algorithm_id





        Fingerprint --> "1" FingerprintAlgorithmIdEnum : algorithm_id
        click FingerprintAlgorithmIdEnum href "../FingerprintAlgorithmIdEnum/"



      Fingerprint : value

Inheritance

Slots

Name Cardinality and Range Description Inheritance
algorithm 0..1
String
The algorithm or scheme used to create the fingerprint, normalized to the direct
algorithm_id 1
FingerprintAlgorithmIdEnum
The identifier of the normalized algorithm or scheme, which was used to creat... direct
value 1
String
The fingerprint value direct

Usages

used by used in type used
Package hash range Fingerprint
Script hashes range Fingerprint
SoftwareComponent hash range Fingerprint
Tls ja3_hash range Fingerprint
Tls ja3s_hash range Fingerprint
AffectedPackage hash range Fingerprint
Certificate fingerprints range Fingerprint
Container hash range Fingerprint
DigitalSignature digest range Fingerprint
File hashes range Fingerprint
Hassh fingerprint range Fingerprint
Idp fingerprint range Fingerprint
NetworkEndpoint fingerprints range Fingerprint
NetworkProxy fingerprints range Fingerprint
BaseEvent raw_data_hash range Fingerprint
ApplicationEvent raw_data_hash range Fingerprint
ApiActivity raw_data_hash range Fingerprint
ApplicationError raw_data_hash range Fingerprint
ApplicationLifecycle raw_data_hash range Fingerprint
DatastoreActivity raw_data_hash range Fingerprint
FileHosting raw_data_hash range Fingerprint
ScanActivity raw_data_hash range Fingerprint
WebResourceAccessActivity raw_data_hash range Fingerprint
WebResourcesActivity raw_data_hash range Fingerprint
DiscoveryEvent raw_data_hash range Fingerprint
AdminGroupQuery raw_data_hash range Fingerprint
CloudResourcesInventoryInfo raw_data_hash range Fingerprint
ConfigState raw_data_hash range Fingerprint
DeviceConfigStateChange raw_data_hash range Fingerprint
DiscoveryResult raw_data_hash range Fingerprint
EvidenceInfo raw_data_hash range Fingerprint
FileQuery raw_data_hash range Fingerprint
FolderQuery raw_data_hash range Fingerprint
InventoryInfo raw_data_hash range Fingerprint
JobQuery raw_data_hash range Fingerprint
KernelObjectQuery raw_data_hash range Fingerprint
ModuleQuery raw_data_hash range Fingerprint
NetworkConnectionQuery raw_data_hash range Fingerprint
NetworksQuery raw_data_hash range Fingerprint
OsintInventoryInfo raw_data_hash range Fingerprint
PatchState raw_data_hash range Fingerprint
PeripheralDeviceQuery raw_data_hash range Fingerprint
ProcessQuery raw_data_hash range Fingerprint
ServiceQuery raw_data_hash range Fingerprint
SessionQuery raw_data_hash range Fingerprint
SoftwareInfo raw_data_hash range Fingerprint
StartupItemQuery raw_data_hash range Fingerprint
UserInventory raw_data_hash range Fingerprint
UserQuery raw_data_hash range Fingerprint
ApplicationSecurityPostureFinding raw_data_hash range Fingerprint
ComplianceFinding raw_data_hash range Fingerprint
DataSecurityFinding raw_data_hash range Fingerprint
DetectionFinding raw_data_hash range Fingerprint
Finding raw_data_hash range Fingerprint
IamAnalysisFinding raw_data_hash range Fingerprint
IncidentFinding raw_data_hash range Fingerprint
SecurityFinding raw_data_hash range Fingerprint
VulnerabilityFinding raw_data_hash range Fingerprint
IamEvent raw_data_hash range Fingerprint
AccountChange raw_data_hash range Fingerprint
Authentication raw_data_hash range Fingerprint
AuthorizeSession raw_data_hash range Fingerprint
EntityManagement raw_data_hash range Fingerprint
GroupManagement raw_data_hash range Fingerprint
UserAccess raw_data_hash range Fingerprint
NetworkEvent raw_data_hash range Fingerprint
DhcpActivity raw_data_hash range Fingerprint
DnsActivity raw_data_hash range Fingerprint
EmailActivity raw_data_hash range Fingerprint
EmailFileActivity raw_data_hash range Fingerprint
EmailUrlActivity raw_data_hash range Fingerprint
FtpActivity raw_data_hash range Fingerprint
HttpActivity raw_data_hash range Fingerprint
NetworkActivity raw_data_hash range Fingerprint
NetworkFileActivity raw_data_hash range Fingerprint
NtpActivity raw_data_hash range Fingerprint
RdpActivity raw_data_hash range Fingerprint
SmbActivity raw_data_hash range Fingerprint
SshActivity raw_data_hash range Fingerprint
TunnelActivity raw_data_hash range Fingerprint
FileRemediationActivity raw_data_hash range Fingerprint
NetworkRemediationActivity raw_data_hash range Fingerprint
ProcessRemediationActivity raw_data_hash range Fingerprint
RemediationActivity raw_data_hash range Fingerprint
SystemEvent raw_data_hash range Fingerprint
EventLogActvity raw_data_hash range Fingerprint
FileActivity raw_data_hash range Fingerprint
KernelActivity raw_data_hash range Fingerprint
KernelExtensionActivity raw_data_hash range Fingerprint
MemoryActivity raw_data_hash range Fingerprint
ModuleActivity raw_data_hash range Fingerprint
PeripheralActivity raw_data_hash range Fingerprint
ProcessActivity raw_data_hash range Fingerprint
ScheduledJobActivity raw_data_hash range Fingerprint
ScriptActivity raw_data_hash range Fingerprint
UnmannedSystemsEvent raw_data_hash range Fingerprint
AirborneBroadcastActivity raw_data_hash range Fingerprint
DroneFlightsActivity raw_data_hash range Fingerprint
PrefetchQuery raw_data_hash range Fingerprint
RegistryKeyActivity raw_data_hash range Fingerprint
RegistryKeyQuery raw_data_hash range Fingerprint
RegistryValueActivity raw_data_hash range Fingerprint
RegistryValueQuery raw_data_hash range Fingerprint
WindowsResourceActivity raw_data_hash range Fingerprint
WindowsServiceActivity raw_data_hash range Fingerprint

In Subsets

Aliases

  • Fingerprint

See Also

Notes

Identifier and Mapping Information

Annotations

property value
observable_id 30

Schema Source

Mappings

Mapping Type Mapped Value
self ocsf:Fingerprint
native ocsf:Fingerprint
exact uco_master:Hash

LinkML Source

Direct

name: Fingerprint
annotations:
  observable_id:
    tag: observable_id
    value: 30
description: 'The Fingerprint object provides detailed information about a fingerprint,
  which

  is a compact representation of data used to identify a longer piece of

  information, such as a public key, file content, or application implementation.

  It contains the algorithm or scheme and value of the fingerprint, enabling

  efficient and reliable identification of the associated data.'
notes:
- 'D3FEND™ Ontology d3f:DigitalFingerprint. 

  https://d3fend.mitre.org/dao/artifact/d3f:DigitalFingerprint/'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
see_also:
- https://d3fend.mitre.org/dao/artifact/d3f:DigitalFingerprint/
aliases:
- Fingerprint
exact_mappings:
- uco_master:Hash
is_a: Object
slots:
- algorithm
- algorithm_id
- value
slot_usage:
  algorithm:
    name: algorithm
    description: 'The algorithm or scheme used to create the fingerprint, normalized
      to the

      caption of <code>algorithm_id</code>. In the case of <code>Other</code>, it
      is

      defined by the event source.'
  algorithm_id:
    name: algorithm_id
    description: 'The identifier of the normalized algorithm or scheme, which was
      used to create

      the fingerprint.'
    range: FingerprintAlgorithmIdEnum
    required: true
  value:
    name: value
    description: 'The fingerprint value.<p><b>Note:</b> This uses type <code>file_hash_t</code>

      (&quot;Hash&quot;), which has been generalized for all fingerprints but retains

      the same name and caption for backwards compatibility.</p>'
    required: true

Induced

name: Fingerprint
annotations:
  observable_id:
    tag: observable_id
    value: 30
description: 'The Fingerprint object provides detailed information about a fingerprint,
  which

  is a compact representation of data used to identify a longer piece of

  information, such as a public key, file content, or application implementation.

  It contains the algorithm or scheme and value of the fingerprint, enabling

  efficient and reliable identification of the associated data.'
notes:
- 'D3FEND™ Ontology d3f:DigitalFingerprint. 

  https://d3fend.mitre.org/dao/artifact/d3f:DigitalFingerprint/'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
see_also:
- https://d3fend.mitre.org/dao/artifact/d3f:DigitalFingerprint/
aliases:
- Fingerprint
exact_mappings:
- uco_master:Hash
is_a: Object
slot_usage:
  algorithm:
    name: algorithm
    description: 'The algorithm or scheme used to create the fingerprint, normalized
      to the

      caption of <code>algorithm_id</code>. In the case of <code>Other</code>, it
      is

      defined by the event source.'
  algorithm_id:
    name: algorithm_id
    description: 'The identifier of the normalized algorithm or scheme, which was
      used to create

      the fingerprint.'
    range: FingerprintAlgorithmIdEnum
    required: true
  value:
    name: value
    description: 'The fingerprint value.<p><b>Note:</b> This uses type <code>file_hash_t</code>

      (&quot;Hash&quot;), which has been generalized for all fingerprints but retains

      the same name and caption for backwards compatibility.</p>'
    required: true
attributes:
  algorithm:
    name: algorithm
    description: 'The algorithm or scheme used to create the fingerprint, normalized
      to the

      caption of <code>algorithm_id</code>. In the case of <code>Other</code>, it
      is

      defined by the event source.'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Algorithm
    rank: 1000
    alias: algorithm
    owner: Fingerprint
    domain_of:
    - Analytic
    - DigitalSignature
    - EncryptionDetails
    - Fingerprint
    - Hassh
    range: string
  algorithm_id:
    name: algorithm_id
    annotations:
      sibling:
        tag: sibling
        value: algorithm
    description: 'The identifier of the normalized algorithm or scheme, which was
      used to create

      the fingerprint.'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Algorithm ID
    rank: 1000
    alias: algorithm_id
    owner: Fingerprint
    domain_of:
    - DigitalSignature
    - EncryptionDetails
    - Fingerprint
    range: FingerprintAlgorithmIdEnum
    required: true
  value:
    name: value
    description: 'The fingerprint value.<p><b>Note:</b> This uses type <code>file_hash_t</code>

      (&quot;Hash&quot;), which has been generalized for all fingerprints but retains

      the same name and caption for backwards compatibility.</p>'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Value
    rank: 1000
    alias: value
    owner: Fingerprint
    domain_of:
    - Observable
    - Observation
    - Osint
    - Packet
    - DiscoveryDetails
    - Enrichment
    - EnvironmentVariable
    - Fingerprint
    - HttpCookie
    - HttpHeader
    - Ja4Fingerprint
    - KeyValueObject
    - LongString
    - Metric
    range: string
    required: true