Skip to content

Class: Graph

A graph data structure representation with nodes and edges.

URI: ocsf:Graph

 classDiagram
    class Graph
    click Graph href "../Graph/"
      Entity <|-- Graph
        click Entity href "../Entity/"

      Graph : desc

      Graph : edges





        Graph --> "*" Edge : edges
        click Edge href "../Edge/"



      Graph : is_directed

      Graph : name

      Graph : nodes





        Graph --> "1..*" Node : nodes
        click Node href "../Node/"



      Graph : query_language

      Graph : query_language_id





        Graph --> "0..1 _recommended_" GraphQueryLanguageIdEnum : query_language_id
        click GraphQueryLanguageIdEnum href "../GraphQueryLanguageIdEnum/"



      Graph : type

      Graph : uid

Inheritance

Slots

Name Cardinality and Range Description Inheritance
desc 0..1
String		 The graph description - provides additional details about the graph's purpose direct
edges *
Edge		 The edges/connections between nodes in the graph - contains the collection of direct
is_directed 0..1
Boolean		 Indicates if the graph is directed (true) or undirected direct
name 0..1 recommended
String		 The graph name - a human readable identifier for the graph direct
nodes 1..*
Node		 The nodes/vertices of the graph - contains the collection of node</code... direct
query_language 0..1
String		 The graph query language, normalized to the caption of the direct
query_language_id 0..1 recommended
GraphQueryLanguageIdEnum		 The normalized identifier of a graph query language that can be used to direct
type 0..1
String		 The graph type direct
uid 0..1 recommended
String		 Unique identifier of the graph - a unique ID to reference this specific graph direct

Usages

used by used in type used
ApplicationObject resource_relationship range Graph
Databucket resource_relationship range Graph
FindingInfo attack_graph range Graph
ResourceDetails resource_relationship range Graph

In Subsets

Aliases

  • Graph

See Also

Notes

Identifier and Mapping Information

Schema Source

Mappings

Mapping Type Mapped Value
self ocsf:Graph
native ocsf:Graph

LinkML Source

Direct

name: Graph
description: A graph data structure representation with nodes and edges.
notes:
- 'JSON graph specification. —

  https://github.com/jsongraph/json-graph-specification/'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
see_also:
- https://github.com/jsongraph/json-graph-specification/
aliases:
- Graph
is_a: Entity
slots:
- desc
- edges
- is_directed
- name
- nodes
- query_language
- query_language_id
- type
- uid
slot_usage:
  desc:
    name: desc
    description: 'The graph description - provides additional details about the graph''s
      purpose

      and contents.'
  edges:
    name: edges
    description: 'The edges/connections between nodes in the graph - contains the
      collection of

      <code>edge</code> objects defining relationships between nodes.'
  is_directed:
    name: is_directed
    description: 'Indicates if the graph is directed (<code>true</code>) or undirected

      (<code>false</code>).'
  name:
    name: name
    description: The graph name - a human readable identifier for the graph.
  nodes:
    name: nodes
    description: 'The nodes/vertices of the graph - contains the collection of <code>node</code>

      objects that make up the graph.'
    required: true
  query_language:
    name: query_language
    description: 'The graph query language, normalized to the caption of the

      <code>query_language_id</code> value.'
  query_language_id:
    name: query_language_id
    description: 'The normalized identifier of a graph query language that can be
      used to

      interact with the graph.'
    range: GraphQueryLanguageIdEnum
    recommended: true
  type:
    name: type
    description: 'The graph type. Typically useful to represent the specific type
      of graph that

      is used.'
  uid:
    name: uid
    description: Unique identifier of the graph - a unique ID to reference this specific
      graph.

Induced

name: Graph
description: A graph data structure representation with nodes and edges.
notes:
- 'JSON graph specification. —

  https://github.com/jsongraph/json-graph-specification/'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
see_also:
- https://github.com/jsongraph/json-graph-specification/
aliases:
- Graph
is_a: Entity
slot_usage:
  desc:
    name: desc
    description: 'The graph description - provides additional details about the graph''s
      purpose

      and contents.'
  edges:
    name: edges
    description: 'The edges/connections between nodes in the graph - contains the
      collection of

      <code>edge</code> objects defining relationships between nodes.'
  is_directed:
    name: is_directed
    description: 'Indicates if the graph is directed (<code>true</code>) or undirected

      (<code>false</code>).'
  name:
    name: name
    description: The graph name - a human readable identifier for the graph.
  nodes:
    name: nodes
    description: 'The nodes/vertices of the graph - contains the collection of <code>node</code>

      objects that make up the graph.'
    required: true
  query_language:
    name: query_language
    description: 'The graph query language, normalized to the caption of the

      <code>query_language_id</code> value.'
  query_language_id:
    name: query_language_id
    description: 'The normalized identifier of a graph query language that can be
      used to

      interact with the graph.'
    range: GraphQueryLanguageIdEnum
    recommended: true
  type:
    name: type
    description: 'The graph type. Typically useful to represent the specific type
      of graph that

      is used.'
  uid:
    name: uid
    description: Unique identifier of the graph - a unique ID to reference this specific
      graph.
attributes:
  desc:
    name: desc
    description: 'The graph description - provides additional details about the graph''s
      purpose

      and contents.'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Description
    rank: 1000
    alias: desc
    owner: Graph
    domain_of:
    - Osint
    - RelatedEvent
    - Remediation
    - Vulnerability
    - Advisory
    - Analytic
    - ApplicationObject
    - Assessment
    - Check
    - CisBenchmark
    - CisBenchmarkResult
    - CisControl
    - Compliance
    - Cve
    - Database
    - Databucket
    - Enrichment
    - File
    - FindingObject
    - FindingInfo
    - Graph
    - Group
    - Job
    - Location
    - Node
    - Policy
    - Rule
    - Table
    - WebResource
    - Device
    - IncidentFinding
    range: string
  edges:
    name: edges
    description: 'The edges/connections between nodes in the graph - contains the
      collection of

      <code>edge</code> objects defining relationships between nodes.'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Edges
    rank: 1000
    alias: edges
    owner: Graph
    domain_of:
    - Graph
    range: Edge
    multivalued: true
  is_directed:
    name: is_directed
    description: 'Indicates if the graph is directed (<code>true</code>) or undirected

      (<code>false</code>).'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Directed
    rank: 1000
    alias: is_directed
    owner: Graph
    domain_of:
    - Edge
    - Graph
    range: boolean
  name:
    name: name
    description: The graph name - a human readable identifier for the graph.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Name
    rank: 1000
    alias: name
    owner: Graph
    domain_of:
    - AnalysisTarget
    - Observable
    - Os
    - Osint
    - Package
    - Parameter
    - PrivilegeInfo
    - San
    - Scim
    - Script
    - ServicePrivilegeAnalysis
    - SoftwareComponent
    - Sso
    - StartupItem
    - ThreatActor
    - Token
    - Entity
    - Resource
    - Account
    - Agent
    - AiModel
    - Aircraft
    - Analytic
    - ApplicationObject
    - Assessment
    - AutonomousSystem
    - Campaign
    - Check
    - CisBenchmark
    - CisBenchmarkResult
    - CisControl
    - ClassifierDetails
    - Container
    - D3fTactic
    - D3fTechnique
    - Database
    - Databucket
    - DomainContact
    - Edge
    - Endpoint
    - Enrichment
    - EnvironmentVariable
    - Evidences
    - Extension
    - Feature
    - File
    - Graph
    - Group
    - HttpCookie
    - HttpHeader
    - Idp
    - Image
    - Job
    - Kernel
    - KeyValueObject
    - LoadBalancer
    - Logger
    - Malware
    - ManagedEntity
    - MessageContext
    - Metric
    - Mitigation
    - NetworkInterface
    - Node
    - Organization
    - PeripheralDevice
    - Policy
    - ProcessEntity
    - Product
    - QueryInfo
    - Reporter
    - ResourceDetails
    - Rule
    - Scan
    - Service
    - SubTechnique
    - Table
    - Tactic
    - Technique
    - Trait
    - TransformationInfo
    - UnmannedAerialSystem
    - User
    - WebResource
    - Device
    - FtpActivity
    - RegValue
    - WinResource
    - WinService
    - PrefetchQuery
    range: string
    recommended: true
  nodes:
    name: nodes
    description: 'The nodes/vertices of the graph - contains the collection of <code>node</code>

      objects that make up the graph.'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Nodes
    rank: 1000
    alias: nodes
    owner: Graph
    domain_of:
    - Graph
    range: Node
    required: true
    multivalued: true
  query_language:
    name: query_language
    description: 'The graph query language, normalized to the caption of the

      <code>query_language_id</code> value.'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Query Language
    rank: 1000
    alias: query_language
    owner: Graph
    domain_of:
    - Graph
    range: string
  query_language_id:
    name: query_language_id
    annotations:
      sibling:
        tag: sibling
        value: query_language
    description: 'The normalized identifier of a graph query language that can be
      used to

      interact with the graph.'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Query Language ID
    rank: 1000
    alias: query_language_id
    owner: Graph
    domain_of:
    - Graph
    range: GraphQueryLanguageIdEnum
    recommended: true
  type:
    name: type
    description: 'The graph type. Typically useful to represent the specific type
      of graph that

      is used.'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Type
    rank: 1000
    alias: type
    owner: Graph
    domain_of:
    - AnalysisTarget
    - Observable
    - Os
    - Osint
    - Package
    - PrivilegeInfo
    - ProgrammaticCredential
    - RelatedEvent
    - San
    - Sbom
    - Script
    - SoftwareComponent
    - StartupItem
    - ThreatActor
    - Ticket
    - Timespan
    - TlsExtension
    - Token
    - Dns
    - Resource
    - Account
    - Agent
    - Analytic
    - ApplicationObject
    - AuthenticationToken
    - ClassifierDetails
    - Cve
    - Database
    - Databucket
    - DiscoveryDetails
    - DnsAnswer
    - DomainContact
    - EncryptionDetails
    - Endpoint
    - Enrichment
    - File
    - Graph
    - Group
    - Ja4Fingerprint
    - Kernel
    - ManagedEntity
    - Metadata
    - Module
    - NetworkEndpoint
    - NetworkInterface
    - Node
    - PeripheralDevice
    - Policy
    - Rule
    - Scan
    - Trait
    - UnmannedAerialSystem
    - UnmannedSystemOperatingArea
    - User
    - WebResource
    - Device
    - DatastoreActivity
    - FtpActivity
    - RegValue
    - WinResource
    range: string
  uid:
    name: uid
    description: Unique identifier of the graph - a unique ID to reference this specific
      graph.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Unique ID
    rank: 1000
    alias: uid
    owner: Graph
    domain_of:
    - Osint
    - Package
    - ProgrammaticCredential
    - RelatedEvent
    - Request
    - Sbom
    - Scim
    - Script
    - Session
    - Span
    - Sso
    - Ticket
    - Token
    - Trace
    - Entity
    - Resource
    - Account
    - Advisory
    - Agent
    - AiModel
    - Aircraft
    - Analytic
    - ApplicationObject
    - Assessment
    - Certificate
    - Check
    - ClassifierDetails
    - Container
    - Cve
    - Cwe
    - D3fTactic
    - D3fTechnique
    - DataClassification
    - Database
    - Databucket
    - DomainContact
    - Edge
    - Email
    - Endpoint
    - Evidences
    - Extension
    - Feature
    - File
    - FindingObject
    - FindingInfo
    - Graph
    - Group
    - HttpRequest
    - Idp
    - Image
    - KbArticle
    - LoadBalancer
    - Logger
    - Malware
    - ManagedEntity
    - MessageContext
    - Metadata
    - Mitigation
    - NetworkConnectionInfo
    - NetworkEndpoint
    - NetworkInterface
    - Node
    - Organization
    - PeripheralDevice
    - Policy
    - ProcessEntity
    - Product
    - QueryInfo
    - Reporter
    - Rule
    - Scan
    - Service
    - SubTechnique
    - Table
    - Tactic
    - Technique
    - Trait
    - TransformationInfo
    - UnmannedAerialSystem
    - User
    - WebResource
    - Device
    - WinResource
    range: string
    recommended: true