Skip to content

Enum: InjectionTypeIdEnum

The normalized identifier of the process injection method.

URI: ocsf:InjectionTypeIdEnum

Permissible Values

Value Meaning Description
UNKNOWN None The injection type is unknown
REMOTE_THREAD None Remote Thread
LOAD_LIBRARY None Load Library
QUEUE_APC None Queue APC
OTHER None The injection type is not mapped

Slots

Name Description
injection_type_id The normalized identifier of the process injection method

Identifier and Mapping Information

Schema Source

LinkML Source

name: InjectionTypeIdEnum
description: The normalized identifier of the process injection method.
from_schema: https://w3id.org/lmodel/ocsf
rank: 1000
permissible_values:
  UNKNOWN:
    text: UNKNOWN
    description: The injection type is unknown.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '0'
      caption:
        tag: caption
        value: Unknown
  REMOTE_THREAD:
    text: REMOTE_THREAD
    description: Remote Thread
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '1'
      caption:
        tag: caption
        value: Remote Thread
  LOAD_LIBRARY:
    text: LOAD_LIBRARY
    description: Load Library
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '2'
      caption:
        tag: caption
        value: Load Library
  QUEUE_APC:
    text: QUEUE_APC
    description: Queue APC
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '3'
      caption:
        tag: caption
        value: Queue APC
  OTHER:
    text: OTHER
    description: 'The injection type is not mapped. See the <code>injection_type</code>

      attribute, which contains a data source specific value.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '99'
      caption:
        tag: caption
        value: Other