Enum: MemoryActivityActivityIdEnum

MemoryActivity activity_id values.

Permissible Values

Value	Meaning	Description
ALLOCATE_PAGE	None	Allocate Page
MODIFY_PAGE	None	Modify Page
DELETE_PAGE	None	Delete Page
BUFFER_OVERFLOW	None	Buffer Overflow
DISABLE_DEP	None	Data Execution Permission
ENABLE_DEP	None	Data Execution Permission
READ	None	Read (Example: `ReadProcessMemory`)
WRITE	None	Write (Example: `WriteProcessMemory`)
MAP_VIEW	None	Map View (Example: `MapViewOfFile2`)
UNKNOWN	None	The event activity is unknown
OTHER	None	The event activity is not mapped

Slots

Name	Description
activity_id

Identifier and Mapping Information

Schema Source

from schema: https://w3id.org/lmodel/ocsf

LinkML Source

name: MemoryActivityActivityIdEnum
description: MemoryActivity activity_id values.
from_schema: https://w3id.org/lmodel/ocsf
rank: 1000
permissible_values:
  ALLOCATE_PAGE:
    text: ALLOCATE_PAGE
    description: Allocate Page
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '1'
      caption:
        tag: caption
        value: Allocate Page
  MODIFY_PAGE:
    text: MODIFY_PAGE
    description: Modify Page
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '2'
      caption:
        tag: caption
        value: Modify Page
  DELETE_PAGE:
    text: DELETE_PAGE
    description: Delete Page
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '3'
      caption:
        tag: caption
        value: Delete Page
  BUFFER_OVERFLOW:
    text: BUFFER_OVERFLOW
    description: Buffer Overflow
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '4'
      caption:
        tag: caption
        value: Buffer Overflow
  DISABLE_DEP:
    text: DISABLE_DEP
    description: Data Execution Permission
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '5'
      caption:
        tag: caption
        value: Disable DEP
  ENABLE_DEP:
    text: ENABLE_DEP
    description: Data Execution Permission
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '6'
      caption:
        tag: caption
        value: Enable DEP
  READ:
    text: READ
    description: 'Read (Example: <code>ReadProcessMemory</code>)'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '7'
      caption:
        tag: caption
        value: Read
  WRITE:
    text: WRITE
    description: 'Write (Example: <code>WriteProcessMemory</code>)'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '8'
      caption:
        tag: caption
        value: Write
  MAP_VIEW:
    text: MAP_VIEW
    description: 'Map View (Example: <code>MapViewOfFile2</code>)'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '9'
      caption:
        tag: caption
        value: Map View
  UNKNOWN:
    text: UNKNOWN
    description: The event activity is unknown.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '0'
      caption:
        tag: caption
        value: Unknown
  OTHER:
    text: OTHER
    description: 'The event activity is not mapped. See the <code>activity_name</code>
      attribute,

      which contains a data source specific value.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '99'
      caption:
        tag: caption
        value: Other