Skip to content

Enum: ManagedEntityTypeIdEnum

The type of the Managed Entity. It is recommended to also populate the

type attribute with the associated label, or the source specific

name if Other.

URI: ocsf:ManagedEntityTypeIdEnum

Permissible Values

Value Meaning Description
DEVICE None A managed Device entity
USER None A managed User entity
GROUP None A managed Group entity
ORGANIZATION None A managed Organization entity
POLICY None A managed Policy entity
EMAIL None A managed Email entity
NETWORK_ZONE None A managed Network Zone entity
UNKNOWN None The type is unknown
OTHER None The type is not mapped

Slots

Name Description
type_id The type of the Managed Entity

Identifier and Mapping Information

Schema Source

LinkML Source

name: ManagedEntityTypeIdEnum
description: 'The type of the Managed Entity. It is recommended to also populate the

  <code>type</code> attribute with the associated label, or the source specific

  name if <code>Other</code>.'
from_schema: https://w3id.org/lmodel/ocsf
rank: 1000
permissible_values:
  DEVICE:
    text: DEVICE
    description: 'A managed Device entity.  This item corresponds to population of
      the

      <code>device</code> attribute.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '1'
      caption:
        tag: caption
        value: Device
  USER:
    text: USER
    description: 'A managed User entity.  This item corresponds to population of the

      <code>user</code> attribute.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '2'
      caption:
        tag: caption
        value: User
  GROUP:
    text: GROUP
    description: 'A managed Group entity.  This item corresponds to population of
      the

      <code>group</code> attribute.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '3'
      caption:
        tag: caption
        value: Group
  ORGANIZATION:
    text: ORGANIZATION
    description: 'A managed Organization entity.  This item corresponds to population
      of the

      <code>org</code> attribute.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '4'
      caption:
        tag: caption
        value: Organization
  POLICY:
    text: POLICY
    description: 'A managed Policy entity.  This item corresponds to population of
      the

      <code>policy</code> attribute.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '5'
      caption:
        tag: caption
        value: Policy
  EMAIL:
    text: EMAIL
    description: 'A managed Email entity.  This item corresponds to population of
      the

      <code>email</code> attribute.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '6'
      caption:
        tag: caption
        value: Email
  NETWORK_ZONE:
    text: NETWORK_ZONE
    description: 'A managed Network Zone entity. Populate the <code>name</code> attribute
      with

      the zone name and/or the <code>uid</code> attribute with the zone ID.

      Additional zone information can be added to the <code>data</code> attribute.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '7'
      caption:
        tag: caption
        value: Network Zone
  UNKNOWN:
    text: UNKNOWN
    description: The type is unknown.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '0'
      caption:
        tag: caption
        value: Unknown
  OTHER:
    text: OTHER
    description: 'The type is not mapped. See the <code>type</code> attribute, which
      contains a

      data source specific value.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '99'
      caption:
        tag: caption
        value: Other