Class: Job

The Job object provides information about a scheduled job or task, including

its name, command line, and state. It encompasses attributes that describe the

properties and status of the scheduled job.

 classDiagram
    class Job
    click Job href "../Job/"
      Object <|-- Job
        click Object href "../Object/"

      Job : cmd_line

      Job : created_time

      Job : desc

      Job : file





        Job --> "0..1" File : file
        click File href "../File/"



      Job : last_run_time

      Job : name

      Job : next_run_time

      Job : run_state

      Job : run_state_id





        Job --> "0..1 _recommended_" JobRunStateIdEnum : run_state_id
        click JobRunStateIdEnum href "../JobRunStateIdEnum/"



      Job : user





        Job --> "0..1" User : user
        click User href "../User/"

Inheritance

OcsfObject
- Object
  - Job

Slots

Name	Cardinality and Range	Description	Inheritance
cmd_line	0..1 recommended String	The job command line	direct
created_time	0..1 recommended TimestampT	The time when the job was created	direct
desc	0..1 recommended String	The description of the job	direct
file	0..1 File	The file that pertains to the job	direct
last_run_time	0..1 recommended TimestampT	The time when the job was last run	direct
name	1 String	The name of the job	direct
next_run_time	0..1 TimestampT	The time when the job will next be run	direct
run_state	0..1 String	The run state of the job	direct
run_state_id	0..1 recommended JobRunStateIdEnum	The run state ID of the job	direct
user	0..1 User	The user that created the job	direct

Usages

used by	used in	type	used
QueryEvidence	job	range	Job
StartupItem	job	range	Job
Evidences	job	range	Job
JobQuery	job	range	Job
ScheduledJobActivity	job	range	Job
WindowsEvidences	job	range	Job
WindowsQueryEvidence	job	range	Job
WindowsStartupItem	job	range	Job

In Subsets

objects_subset

Aliases

Job

Notes

D3FEND™ Ontology d3f:ScheduledJob. — https://d3fend.mitre.org/dao/artifact/d3f:ScheduledJob/

Identifier and Mapping Information

Schema Source

from schema: https://w3id.org/lmodel/ocsf

Mappings

Mapping Type	Mapped Value
self	ocsf:Job
native	ocsf:Job

LinkML Source

Direct

name: Job
description: 'The Job object provides information about a scheduled job or task, including

  its name, command line, and state. It encompasses attributes that describe the

  properties and status of the scheduled job.'
notes:
- 'D3FEND™ Ontology d3f:ScheduledJob. —

  https://d3fend.mitre.org/dao/artifact/d3f:ScheduledJob/'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
see_also:
- https://d3fend.mitre.org/dao/artifact/d3f:ScheduledJob/
aliases:
- Job
is_a: Object
slots:
- cmd_line
- created_time
- desc
- file
- last_run_time
- name
- next_run_time
- run_state
- run_state_id
- user
slot_usage:
  cmd_line:
    name: cmd_line
    description: The job command line.
    recommended: true
  created_time:
    name: created_time
    description: The time when the job was created.
    recommended: true
  desc:
    name: desc
    description: The description of the job.
    recommended: true
  file:
    name: file
    description: The file that pertains to the job.
  last_run_time:
    name: last_run_time
    description: The time when the job was last run.
    recommended: true
  name:
    name: name
    description: The name of the job.
    required: true
  next_run_time:
    name: next_run_time
    description: The time when the job will next be run.
  run_state:
    name: run_state
    description: The run state of the job.
  run_state_id:
    name: run_state_id
    description: The run state ID of the job.
    range: JobRunStateIdEnum
    recommended: true
  user:
    name: user
    description: The user that created the job.

Induced

name: Job
description: 'The Job object provides information about a scheduled job or task, including

  its name, command line, and state. It encompasses attributes that describe the

  properties and status of the scheduled job.'
notes:
- 'D3FEND™ Ontology d3f:ScheduledJob. —

  https://d3fend.mitre.org/dao/artifact/d3f:ScheduledJob/'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
see_also:
- https://d3fend.mitre.org/dao/artifact/d3f:ScheduledJob/
aliases:
- Job
is_a: Object
slot_usage:
  cmd_line:
    name: cmd_line
    description: The job command line.
    recommended: true
  created_time:
    name: created_time
    description: The time when the job was created.
    recommended: true
  desc:
    name: desc
    description: The description of the job.
    recommended: true
  file:
    name: file
    description: The file that pertains to the job.
  last_run_time:
    name: last_run_time
    description: The time when the job was last run.
    recommended: true
  name:
    name: name
    description: The name of the job.
    required: true
  next_run_time:
    name: next_run_time
    description: The time when the job will next be run.
  run_state:
    name: run_state
    description: The run state of the job.
  run_state_id:
    name: run_state_id
    description: The run state ID of the job.
    range: JobRunStateIdEnum
    recommended: true
  user:
    name: user
    description: The user that created the job.
attributes:
  cmd_line:
    name: cmd_line
    annotations:
      observable_id:
        tag: observable_id
        value: 13
    description: The job command line.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Command Line
    rank: 1000
    alias: cmd_line
    owner: Job
    domain_of:
    - Job
    - ProcessEntity
    - WinService
    range: string
    recommended: true
  created_time:
    name: created_time
    description: The time when the job was created.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Created Time
    rank: 1000
    alias: created_time
    owner: Job
    domain_of:
    - Osint
    - RelatedEvent
    - Sbom
    - Scim
    - Session
    - Sso
    - Token
    - Whois
    - Resource
    - Advisory
    - AuthenticationToken
    - Certificate
    - Cve
    - Database
    - Databucket
    - DigitalSignature
    - Enrichment
    - Epss
    - File
    - FindingObject
    - FindingInfo
    - Job
    - KbArticle
    - LdapPerson
    - ProcessEntity
    - Table
    - Device
    range: TimestampT
    recommended: true
  desc:
    name: desc
    description: The description of the job.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Description
    rank: 1000
    alias: desc
    owner: Job
    domain_of:
    - Osint
    - RelatedEvent
    - Remediation
    - Vulnerability
    - Advisory
    - Analytic
    - ApplicationObject
    - Assessment
    - Check
    - CisBenchmark
    - CisBenchmarkResult
    - CisControl
    - Compliance
    - Cve
    - Database
    - Databucket
    - Enrichment
    - File
    - FindingObject
    - FindingInfo
    - Graph
    - Group
    - Job
    - Location
    - Node
    - Policy
    - Rule
    - Table
    - WebResource
    - Device
    - IncidentFinding
    range: string
    recommended: true
  file:
    name: file
    description: The file that pertains to the job.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - File
    rank: 1000
    alias: file
    owner: Job
    domain_of:
    - Osint
    - QueryEvidence
    - Script
    - AffectedCode
    - Databucket
    - Evidences
    - Job
    - KernelDriver
    - Module
    - Process
    - FileHosting
    - FileQuery
    - DataSecurityFinding
    - EmailFileActivity
    - FtpActivity
    - HttpActivity
    - NetworkFileActivity
    - RdpActivity
    - SmbActivity
    - SshActivity
    - FileRemediationActivity
    - EventLogActvity
    - FileActivity
    range: File
  last_run_time:
    name: last_run_time
    description: The time when the job was last run.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Last Run
    rank: 1000
    alias: last_run_time
    owner: Job
    domain_of:
    - Scim
    - Job
    - PrefetchQuery
    range: TimestampT
    recommended: true
  name:
    name: name
    description: The name of the job.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Name
    rank: 1000
    alias: name
    owner: Job
    domain_of:
    - AnalysisTarget
    - Observable
    - Os
    - Osint
    - Package
    - Parameter
    - PrivilegeInfo
    - San
    - Scim
    - Script
    - ServicePrivilegeAnalysis
    - SoftwareComponent
    - Sso
    - StartupItem
    - ThreatActor
    - Token
    - Entity
    - Resource
    - Account
    - Agent
    - AiModel
    - Aircraft
    - Analytic
    - ApplicationObject
    - Assessment
    - AutonomousSystem
    - Campaign
    - Check
    - CisBenchmark
    - CisBenchmarkResult
    - CisControl
    - ClassifierDetails
    - Container
    - D3fTactic
    - D3fTechnique
    - Database
    - Databucket
    - DomainContact
    - Edge
    - Endpoint
    - Enrichment
    - EnvironmentVariable
    - Evidences
    - Extension
    - Feature
    - File
    - Graph
    - Group
    - HttpCookie
    - HttpHeader
    - Idp
    - Image
    - Job
    - Kernel
    - KeyValueObject
    - LoadBalancer
    - Logger
    - Malware
    - ManagedEntity
    - MessageContext
    - Metric
    - Mitigation
    - NetworkInterface
    - Node
    - Organization
    - PeripheralDevice
    - Policy
    - ProcessEntity
    - Product
    - QueryInfo
    - Reporter
    - ResourceDetails
    - Rule
    - Scan
    - Service
    - SubTechnique
    - Table
    - Tactic
    - Technique
    - Trait
    - TransformationInfo
    - UnmannedAerialSystem
    - User
    - WebResource
    - Device
    - FtpActivity
    - RegValue
    - WinResource
    - WinService
    - PrefetchQuery
    range: string
    required: true
  next_run_time:
    name: next_run_time
    description: The time when the job will next be run.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Next Run
    rank: 1000
    alias: next_run_time
    owner: Job
    domain_of:
    - Job
    range: TimestampT
  run_state:
    name: run_state
    description: The run state of the job.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Run State
    rank: 1000
    alias: run_state
    owner: Job
    domain_of:
    - StartupItem
    - Job
    range: string
  run_state_id:
    name: run_state_id
    annotations:
      sibling:
        tag: sibling
        value: run_state
    description: The run state ID of the job.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Run State ID
    rank: 1000
    alias: run_state_id
    owner: Job
    domain_of:
    - StartupItem
    - Job
    range: JobRunStateIdEnum
    recommended: true
  user:
    name: user
    description: The user that created the job.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - User
    rank: 1000
    alias: user
    owner: Job
    domain_of:
    - QueryEvidence
    - Actor
    - Evidences
    - Job
    - ManagedEntity
    - Process
    - UserInventory
    - UserQuery
    - IamAnalysisFinding
    - AccountChange
    - Authentication
    - AuthorizeSession
    - GroupManagement
    - UserAccess
    - RdpActivity
    - TunnelActivity
    range: User