Enum: LaunchTypeIdEnum

The normalized identifier for the specific type of Launch

activity.

Permissible Values

Value	Meaning	Description
UNKNOWN	None	The launch type is unknown or not specified
SPAWN	None	Denotes that the `Launch` event represents atomic creation of a ne...
FORK	None	Denotes that the `Launch` event represents the "fork" step of Unix
EXEC	None	Denotes that the `Launch` event represents the "exec" step of Unix
OTHER	None	The launch type is not mapped

Slots

Name	Description
launch_type_id	The normalized identifier for the specific type of `Launch`

Identifier and Mapping Information

Schema Source

from schema: https://w3id.org/lmodel/ocsf

LinkML Source

name: LaunchTypeIdEnum
description: 'The normalized identifier for the specific type of <code>Launch</code>

  activity.'
from_schema: https://w3id.org/lmodel/ocsf
rank: 1000
permissible_values:
  UNKNOWN:
    text: UNKNOWN
    description: The launch type is unknown or not specified.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '0'
      caption:
        tag: caption
        value: Unknown
  SPAWN:
    text: SPAWN
    description: 'Denotes that the <code>Launch</code> event represents atomic creation
      of a new

      process on Windows. This launch type ID may also be used to represent both

      steps of Unix process creation in a single <code>Launch</code> event.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '1'
      caption:
        tag: caption
        value: Spawn
  FORK:
    text: FORK
    description: 'Denotes that the <code>Launch</code> event represents the "fork"
      step of Unix

      process creation, where a process creates a clone of itself in a parent-child

      relationship. WSL1 pico processes on Windows also use the 2-step Unix model.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '2'
      caption:
        tag: caption
        value: Fork
  EXEC:
    text: EXEC
    description: 'Denotes that the <code>Launch</code> event represents the "exec"
      step of Unix

      process creation, where a process replaces its executable image, command line,

      and environment. WSL1 pico processes on Windows also use the 2-step Unix model.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '3'
      caption:
        tag: caption
        value: Exec
  OTHER:
    text: OTHER
    description: 'The launch type is not mapped. See the <code>launch_type</code>
      attribute,

      which contains a data source specific value.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '99'
      caption:
        tag: caption
        value: Other