Skip to content

Class: HttpCookie

The HTTP Cookie object, also known as a web cookie or browser cookie, contains

details and values pertaining to a small piece of data that a server sends to a

user's web browser. This data is then stored by the browser and sent back to

the server with subsequent requests, allowing the server to remember and track

certain information about the user's browsing session or preferences.

URI: ocsf:HttpCookie

 classDiagram
    class HttpCookie
    click HttpCookie href "../HttpCookie/"
      Object <|-- HttpCookie
        click Object href "../Object/"

      HttpCookie : domain

      HttpCookie : expiration_time

      HttpCookie : http_only

      HttpCookie : is_http_only

      HttpCookie : is_secure

      HttpCookie : name

      HttpCookie : path

      HttpCookie : samesite

      HttpCookie : secure

      HttpCookie : value

Inheritance

Slots

Name Cardinality and Range Description Inheritance
domain 0..1
String
The domain name for the server from which the http_cookie is served direct
expiration_time 0..1
TimestampT
The expiration time of the HTTP cookie direct
http_only 0..1
Boolean
A cookie attribute to make it inaccessible via JavaScript direct
is_http_only 0..1
Boolean
This attribute prevents the cookie from being accessed via JavaScript direct
is_secure 0..1
Boolean
The cookie attribute indicates that cookies are sent to the server only when direct
name 1
String
The HTTP cookie name direct
path 0..1
String
The path of the HTTP cookie direct
samesite 0..1
String
The cookie attribute that lets servers specify whether/when cookies are sent direct
secure 0..1
Boolean
The cookie attribute to only send cookies to the server with an encrypted direct
value 1
String
The HTTP cookie value direct

Usages

used by used in type used
HttpActivity http_cookies range HttpCookie

In Subsets

Aliases

  • HTTP Cookie

See Also

Notes

Identifier and Mapping Information

Schema Source

Mappings

Mapping Type Mapped Value
self ocsf:HttpCookie
native ocsf:HttpCookie
exact uco_master:BrowserCookie

LinkML Source

Direct

name: HttpCookie
description: 'The HTTP Cookie object, also known as a web cookie or browser cookie,
  contains

  details and values pertaining to a small piece of data that a server sends to a

  user''s web browser. This data is then stored by the browser and sent back to

  the server with subsequent requests, allowing the server to remember and track

  certain information about the user''s browsing session or preferences.'
notes:
- 'D3FEND™ Ontology d3f:SessionCookie. 

  https://d3fend.mitre.org/dao/artifact/d3f:SessionCookie/'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
see_also:
- https://d3fend.mitre.org/dao/artifact/d3f:SessionCookie/
aliases:
- HTTP Cookie
exact_mappings:
- uco_master:BrowserCookie
is_a: Object
slots:
- domain
- expiration_time
- http_only
- is_http_only
- is_secure
- name
- path
- samesite
- secure
- value
slot_usage:
  domain:
    name: domain
    description: The domain name for the server from which the http_cookie is served.
  expiration_time:
    name: expiration_time
    description: The expiration time of the HTTP cookie.
  name:
    name: name
    description: The HTTP cookie name.
    required: true
  path:
    name: path
    description: The path of the HTTP cookie.
  value:
    name: value
    description: The HTTP cookie value.
    required: true

Induced

name: HttpCookie
description: 'The HTTP Cookie object, also known as a web cookie or browser cookie,
  contains

  details and values pertaining to a small piece of data that a server sends to a

  user''s web browser. This data is then stored by the browser and sent back to

  the server with subsequent requests, allowing the server to remember and track

  certain information about the user''s browsing session or preferences.'
notes:
- 'D3FEND™ Ontology d3f:SessionCookie. 

  https://d3fend.mitre.org/dao/artifact/d3f:SessionCookie/'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
see_also:
- https://d3fend.mitre.org/dao/artifact/d3f:SessionCookie/
aliases:
- HTTP Cookie
exact_mappings:
- uco_master:BrowserCookie
is_a: Object
slot_usage:
  domain:
    name: domain
    description: The domain name for the server from which the http_cookie is served.
  expiration_time:
    name: expiration_time
    description: The expiration time of the HTTP cookie.
  name:
    name: name
    description: The HTTP cookie name.
    required: true
  path:
    name: path
    description: The path of the HTTP cookie.
  value:
    name: value
    description: The HTTP cookie value.
    required: true
attributes:
  domain:
    name: domain
    description: The domain name for the server from which the http_cookie is served.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Domain
    rank: 1000
    alias: domain
    owner: HttpCookie
    domain_of:
    - Url
    - Whois
    - Endpoint
    - Group
    - HttpCookie
    - Idp
    - User
    - Device
    range: string
  expiration_time:
    name: expiration_time
    description: The expiration time of the HTTP cookie.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Expiration Time
    rank: 1000
    alias: expiration_time
    owner: HttpCookie
    domain_of:
    - Osint
    - Session
    - Token
    - AuthenticationToken
    - Certificate
    - HttpCookie
    - FileHosting
    - NetworkFileActivity
    range: TimestampT
  http_only:
    name: http_only
    description: A cookie attribute to make it inaccessible via JavaScript
    deprecated: Use the <code>is_http_only</code> attribute instead. (since 1.1.0)
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - HTTP Only
    rank: 1000
    alias: http_only
    owner: HttpCookie
    domain_of:
    - HttpCookie
    range: boolean
  is_http_only:
    name: is_http_only
    description: This attribute prevents the cookie from being accessed via JavaScript.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - HTTP Only
    rank: 1000
    alias: is_http_only
    owner: HttpCookie
    domain_of:
    - HttpCookie
    range: boolean
  is_secure:
    name: is_secure
    description: 'The cookie attribute indicates that cookies are sent to the server
      only when

      the request is encrypted using the HTTPS protocol.'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Secure
    rank: 1000
    alias: is_secure
    owner: HttpCookie
    domain_of:
    - HttpCookie
    range: boolean
  name:
    name: name
    description: The HTTP cookie name.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Name
    rank: 1000
    alias: name
    owner: HttpCookie
    domain_of:
    - AnalysisTarget
    - Observable
    - Os
    - Osint
    - Package
    - Parameter
    - PrivilegeInfo
    - San
    - Scim
    - Script
    - ServicePrivilegeAnalysis
    - SoftwareComponent
    - Sso
    - StartupItem
    - ThreatActor
    - Token
    - Entity
    - Resource
    - Account
    - Agent
    - AiModel
    - Aircraft
    - Analytic
    - ApplicationObject
    - Assessment
    - AutonomousSystem
    - Campaign
    - Check
    - CisBenchmark
    - CisBenchmarkResult
    - CisControl
    - ClassifierDetails
    - Container
    - D3fTactic
    - D3fTechnique
    - Database
    - Databucket
    - DomainContact
    - Edge
    - Endpoint
    - Enrichment
    - EnvironmentVariable
    - Evidences
    - Extension
    - Feature
    - File
    - Graph
    - Group
    - HttpCookie
    - HttpHeader
    - Idp
    - Image
    - Job
    - Kernel
    - KeyValueObject
    - LoadBalancer
    - Logger
    - Malware
    - ManagedEntity
    - MessageContext
    - Metric
    - Mitigation
    - NetworkInterface
    - Node
    - Organization
    - PeripheralDevice
    - Policy
    - ProcessEntity
    - Product
    - QueryInfo
    - Reporter
    - ResourceDetails
    - Rule
    - Scan
    - Service
    - SubTechnique
    - Table
    - Tactic
    - Technique
    - Trait
    - TransformationInfo
    - UnmannedAerialSystem
    - User
    - WebResource
    - Device
    - FtpActivity
    - RegValue
    - WinResource
    - WinService
    - PrefetchQuery
    range: string
    required: true
  path:
    name: path
    description: The path of the HTTP cookie.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Path
    rank: 1000
    alias: path
    owner: HttpCookie
    domain_of:
    - Url
    - AffectedPackage
    - File
    - HttpCookie
    - Image
    - Kernel
    - Malware
    - ProcessEntity
    - Product
    - RegKey
    - RegValue
    range: string
  samesite:
    name: samesite
    description: 'The cookie attribute that lets servers specify whether/when cookies
      are sent

      with cross-site requests. Values are: Strict, Lax or None'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - SameSite
    rank: 1000
    alias: samesite
    owner: HttpCookie
    domain_of:
    - HttpCookie
    range: string
  secure:
    name: secure
    description: 'The cookie attribute to only send cookies to the server with an
      encrypted

      request over the HTTPS protocol.'
    deprecated: Use the <code>is_secure</code> attribute instead. (since 1.1.0)
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Secure
    rank: 1000
    alias: secure
    owner: HttpCookie
    domain_of:
    - HttpCookie
    range: boolean
  value:
    name: value
    description: The HTTP cookie value.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Value
    rank: 1000
    alias: value
    owner: HttpCookie
    domain_of:
    - Observable
    - Observation
    - Osint
    - Packet
    - DiscoveryDetails
    - Enrichment
    - EnvironmentVariable
    - Fingerprint
    - HttpCookie
    - HttpHeader
    - Ja4Fingerprint
    - KeyValueObject
    - LongString
    - Metric
    range: string
    required: true