Skip to content

Enum: FingerprintAlgorithmIdEnum

The identifier of the normalized algorithm or scheme, which was used to create

the fingerprint.

URI: ocsf:FingerprintAlgorithmIdEnum

Permissible Values

Value Meaning Description
UNKNOWN None Unknown
MD5 None MD5 message-digest algorithm producing a 128-bit (16-byte) hash value
SHA_1 None Secure Hash Algorithm 1 producing a 160-bit (20-byte) hash value
SHA_256 None Secure Hash Algorithm 2 producing a 256-bit (32-byte) hash value
SHA_512 None Secure Hash Algorithm 2 producing a 512-bit (64-byte) hash value
CTPH None The ssdeep generated fuzzy checksum
TLSH None The TLSH fuzzy hashing algorithm
QUICKXORHASH None Microsoft simple non-cryptographic hash algorithm that works by XORing the
SHA_224 None Secure Hash Algorithm 2 producing a 224-bit (28-byte) hash value
SHA_384 None Secure Hash Algorithm 2 producing a 384-bit (48-byte) hash value
SHA_512_224 None Secure Hash Algorithm 2 producing a 512-bit (64-byte) hash value truncated to...
SHA_512_256 None Secure Hash Algorithm 2 producing a 512-bit (64-byte) hash value truncated to...
SHA3_224 None Secure Hash Algorithm 3 producing a 224-bit (28-byte) hash value
SHA3_256 None Secure Hash Algorithm 3 producing a 256-bit (32-byte) hash value
SHA3_384 None Secure Hash Algorithm 3 producing a 384-bit (48-byte) hash value
SHA3_512 None Secure Hash Algorithm 3 producing a 512-bit (64-byte) hash value
XXHASH_H3_64_BIT None xxHash H3 producing a 64-bit hash value
XXHASH_H3_128_BIT None xxHash H3 producing a 128-bit hash value
IMPHASH None Import hash (imphash) based on the import table of a Portable Executable (PE)
NPF None Network Protocol Fingerprint (NPF) used to identify network protocols and
HASSH None HASSH is a network fingerprinting standard which can be used to identify
OTHER None Other

Slots

Name Description
algorithm_id The identifier of the normalized algorithm or scheme, which was used to creat...

Identifier and Mapping Information

Schema Source

LinkML Source

name: FingerprintAlgorithmIdEnum
description: 'The identifier of the normalized algorithm or scheme, which was used
  to create

  the fingerprint.'
from_schema: https://w3id.org/lmodel/ocsf
rank: 1000
permissible_values:
  UNKNOWN:
    text: UNKNOWN
    description: Unknown
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '0'
      caption:
        tag: caption
        value: Unknown
  MD5:
    text: MD5
    description: MD5 message-digest algorithm producing a 128-bit (16-byte) hash value.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '1'
      caption:
        tag: caption
        value: MD5
  SHA_1:
    text: SHA_1
    description: Secure Hash Algorithm 1 producing a 160-bit (20-byte) hash value.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '2'
      caption:
        tag: caption
        value: SHA-1
  SHA_256:
    text: SHA_256
    description: Secure Hash Algorithm 2 producing a 256-bit (32-byte) hash value.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '3'
      caption:
        tag: caption
        value: SHA-256
  SHA_512:
    text: SHA_512
    description: Secure Hash Algorithm 2 producing a 512-bit (64-byte) hash value.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '4'
      caption:
        tag: caption
        value: SHA-512
  CTPH:
    text: CTPH
    description: 'The ssdeep generated fuzzy checksum. Also known as Context Triggered
      Piecewise

      Hash (CTPH).'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '5'
      caption:
        tag: caption
        value: CTPH
  TLSH:
    text: TLSH
    description: The TLSH fuzzy hashing algorithm.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '6'
      caption:
        tag: caption
        value: TLSH
  QUICKXORHASH:
    text: QUICKXORHASH
    description: 'Microsoft simple non-cryptographic hash algorithm that works by
      XORing the

      bytes in a circular-shifting fashion.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '7'
      caption:
        tag: caption
        value: quickXorHash
  SHA_224:
    text: SHA_224
    description: Secure Hash Algorithm 2 producing a 224-bit (28-byte) hash value.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '8'
      caption:
        tag: caption
        value: SHA-224
  SHA_384:
    text: SHA_384
    description: Secure Hash Algorithm 2 producing a 384-bit (48-byte) hash value.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '9'
      caption:
        tag: caption
        value: SHA-384
  SHA_512_224:
    text: SHA_512_224
    description: 'Secure Hash Algorithm 2 producing a 512-bit (64-byte) hash value
      truncated to a

      224-bit (28-byte) hash value.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '10'
      caption:
        tag: caption
        value: SHA-512/224
  SHA_512_256:
    text: SHA_512_256
    description: 'Secure Hash Algorithm 2 producing a 512-bit (64-byte) hash value
      truncated to a

      256-bit (32-byte) hash value.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '11'
      caption:
        tag: caption
        value: SHA-512/256
  SHA3_224:
    text: SHA3_224
    description: Secure Hash Algorithm 3 producing a 224-bit (28-byte) hash value.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '12'
      caption:
        tag: caption
        value: SHA3-224
  SHA3_256:
    text: SHA3_256
    description: Secure Hash Algorithm 3 producing a 256-bit (32-byte) hash value.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '13'
      caption:
        tag: caption
        value: SHA3-256
  SHA3_384:
    text: SHA3_384
    description: Secure Hash Algorithm 3 producing a 384-bit (48-byte) hash value.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '14'
      caption:
        tag: caption
        value: SHA3-384
  SHA3_512:
    text: SHA3_512
    description: Secure Hash Algorithm 3 producing a 512-bit (64-byte) hash value.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '15'
      caption:
        tag: caption
        value: SHA3-512
  XXHASH_H3_64_BIT:
    text: XXHASH_H3_64_BIT
    description: xxHash H3 producing a 64-bit hash value.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '16'
      caption:
        tag: caption
        value: xxHash H3 64-bit
  XXHASH_H3_128_BIT:
    text: XXHASH_H3_128_BIT
    description: xxHash H3 producing a 128-bit hash value.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '17'
      caption:
        tag: caption
        value: xxHash H3 128-bit
  IMPHASH:
    text: IMPHASH
    description: 'Import hash (imphash) based on the import table of a Portable Executable
      (PE)

      file producing a 128-bit (16-byte) hash value.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '18'
      caption:
        tag: caption
        value: Imphash
  NPF:
    text: NPF
    description: 'Network Protocol Fingerprint (NPF) used to identify network protocols
      and

      applications.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '19'
      caption:
        tag: caption
        value: NPF
  HASSH:
    text: HASSH
    description: 'HASSH is a network fingerprinting standard which can be used to
      identify

      specific SSH client and server implementations.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '20'
      caption:
        tag: caption
        value: HASSH
  OTHER:
    text: OTHER
    description: Other
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '99'
      caption:
        tag: caption
        value: Other