Enum: ManagedEntityTypeIdEnum
The type of the Managed Entity. It is recommended to also populate the
type attribute with the associated label, or the source specific
name if Other.
URI: ocsf:ManagedEntityTypeIdEnum
Permissible Values
| Value | Meaning | Description |
|---|---|---|
| DEVICE | None | A managed Device entity |
| USER | None | A managed User entity |
| GROUP | None | A managed Group entity |
| ORGANIZATION | None | A managed Organization entity |
| POLICY | None | A managed Policy entity |
| None | A managed Email entity | |
| NETWORK_ZONE | None | A managed Network Zone entity |
| UNKNOWN | None | The type is unknown |
| OTHER | None | The type is not mapped |
Slots
| Name | Description |
|---|---|
| type_id | The type of the Managed Entity |
Identifier and Mapping Information
Schema Source
- from schema: https://w3id.org/lmodel/ocsf
LinkML Source
name: ManagedEntityTypeIdEnum
description: 'The type of the Managed Entity. It is recommended to also populate the
<code>type</code> attribute with the associated label, or the source specific
name if <code>Other</code>.'
from_schema: https://w3id.org/lmodel/ocsf
rank: 1000
permissible_values:
DEVICE:
text: DEVICE
description: 'A managed Device entity. This item corresponds to population of
the
<code>device</code> attribute.'
annotations:
ocsf_uid:
tag: ocsf_uid
value: '1'
caption:
tag: caption
value: Device
USER:
text: USER
description: 'A managed User entity. This item corresponds to population of the
<code>user</code> attribute.'
annotations:
ocsf_uid:
tag: ocsf_uid
value: '2'
caption:
tag: caption
value: User
GROUP:
text: GROUP
description: 'A managed Group entity. This item corresponds to population of
the
<code>group</code> attribute.'
annotations:
ocsf_uid:
tag: ocsf_uid
value: '3'
caption:
tag: caption
value: Group
ORGANIZATION:
text: ORGANIZATION
description: 'A managed Organization entity. This item corresponds to population
of the
<code>org</code> attribute.'
annotations:
ocsf_uid:
tag: ocsf_uid
value: '4'
caption:
tag: caption
value: Organization
POLICY:
text: POLICY
description: 'A managed Policy entity. This item corresponds to population of
the
<code>policy</code> attribute.'
annotations:
ocsf_uid:
tag: ocsf_uid
value: '5'
caption:
tag: caption
value: Policy
EMAIL:
text: EMAIL
description: 'A managed Email entity. This item corresponds to population of
the
<code>email</code> attribute.'
annotations:
ocsf_uid:
tag: ocsf_uid
value: '6'
caption:
tag: caption
value: Email
NETWORK_ZONE:
text: NETWORK_ZONE
description: 'A managed Network Zone entity. Populate the <code>name</code> attribute
with
the zone name and/or the <code>uid</code> attribute with the zone ID.
Additional zone information can be added to the <code>data</code> attribute.'
annotations:
ocsf_uid:
tag: ocsf_uid
value: '7'
caption:
tag: caption
value: Network Zone
UNKNOWN:
text: UNKNOWN
description: The type is unknown.
annotations:
ocsf_uid:
tag: ocsf_uid
value: '0'
caption:
tag: caption
value: Unknown
OTHER:
text: OTHER
description: 'The type is not mapped. See the <code>type</code> attribute, which
contains a
data source specific value.'
annotations:
ocsf_uid:
tag: ocsf_uid
value: '99'
caption:
tag: caption
value: Other