Skip to content

Class: Object

An unordered collection of attributes. It defines a set of attributes available

in all objects. It can be also used as a generic object to log objects that are

not otherwise defined by the schema.

URI: ocsf:Object

 classDiagram
    class Object
    click Object href "../Object/"
      OcsfObject <|-- Object
        click OcsfObject href "../OcsfObject/"


      Object <|-- Observable
        click Observable href "../Observable/"
      Object <|-- Observation
        click Observation href "../Observation/"
      Object <|-- OccurrenceDetails
        click OccurrenceDetails href "../OccurrenceDetails/"
      Object <|-- Os
        click Os href "../Os/"
      Object <|-- Osint
        click Osint href "../Osint/"
      Object <|-- Package
        click Package href "../Package/"
      Object <|-- Packet
        click Packet href "../Packet/"
      Object <|-- Parameter
        click Parameter href "../Parameter/"
      Object <|-- PermissionAnalysisResult
        click PermissionAnalysisResult href "../PermissionAnalysisResult/"
      Object <|-- PortInfo
        click PortInfo href "../PortInfo/"
      Object <|-- PrivilegeAttackInfo
        click PrivilegeAttackInfo href "../PrivilegeAttackInfo/"
      Object <|-- PrivilegeInfo
        click PrivilegeInfo href "../PrivilegeInfo/"
      Object <|-- ProgrammaticCredential
        click ProgrammaticCredential href "../ProgrammaticCredential/"
      Object <|-- RelatedEvent
        click RelatedEvent href "../RelatedEvent/"
      Object <|-- Remediation
        click Remediation href "../Remediation/"
      Object <|-- Reputation
        click Reputation href "../Reputation/"
      Object <|-- Request
        click Request href "../Request/"
      Object <|-- Response
        click Response href "../Response/"
      Object <|-- RpcInterface
        click RpcInterface href "../RpcInterface/"
      Object <|-- San
        click San href "../San/"
      Object <|-- Sbom
        click Sbom href "../Sbom/"
      Object <|-- Scim
        click Scim href "../Scim/"
      Object <|-- Script
        click Script href "../Script/"
      Object <|-- SecurityState
        click SecurityState href "../SecurityState/"
      Object <|-- ServicePrivilegeAnalysis
        click ServicePrivilegeAnalysis href "../ServicePrivilegeAnalysis/"
      Object <|-- Session
        click Session href "../Session/"
      Object <|-- SoftwareComponent
        click SoftwareComponent href "../SoftwareComponent/"
      Object <|-- Span
        click Span href "../Span/"
      Object <|-- Sso
        click Sso href "../Sso/"
      Object <|-- ThreatActor
        click ThreatActor href "../ThreatActor/"
      Object <|-- Ticket
        click Ticket href "../Ticket/"
      Object <|-- Timespan
        click Timespan href "../Timespan/"
      Object <|-- Tls
        click Tls href "../Tls/"
      Object <|-- TlsExtension
        click TlsExtension href "../TlsExtension/"
      Object <|-- Token
        click Token href "../Token/"
      Object <|-- Trace
        click Trace href "../Trace/"
      Object <|-- Url
        click Url href "../Url/"
      Object <|-- VendorAttributes
        click VendorAttributes href "../VendorAttributes/"
      Object <|-- Vulnerability
        click Vulnerability href "../Vulnerability/"
      Object <|-- Whois
        click Whois href "../Whois/"
      Object <|-- Dns
        click Dns href "../Dns/"
      Object <|-- Entity
        click Entity href "../Entity/"
      Object <|-- AccessAnalysisResult
        click AccessAnalysisResult href "../AccessAnalysisResult/"
      Object <|-- Actor
        click Actor href "../Actor/"
      Object <|-- AdditionalRestriction
        click AdditionalRestriction href "../AdditionalRestriction/"
      Object <|-- Advisory
        click Advisory href "../Advisory/"
      Object <|-- AffectedCode
        click AffectedCode href "../AffectedCode/"
      Object <|-- Agent
        click Agent href "../Agent/"
      Object <|-- Anomaly
        click Anomaly href "../Anomaly/"
      Object <|-- Api
        click Api href "../Api/"
      Object <|-- ApplicationObject
        click ApplicationObject href "../ApplicationObject/"
      Object <|-- Attack
        click Attack href "../Attack/"
      Object <|-- AuthFactor
        click AuthFactor href "../AuthFactor/"
      Object <|-- Authorization
        click Authorization href "../Authorization/"
      Object <|-- AutonomousSystem
        click AutonomousSystem href "../AutonomousSystem/"
      Object <|-- Baseline
        click Baseline href "../Baseline/"
      Object <|-- Campaign
        click Campaign href "../Campaign/"
      Object <|-- Certificate
        click Certificate href "../Certificate/"
      Object <|-- Check
        click Check href "../Check/"
      Object <|-- CisBenchmark
        click CisBenchmark href "../CisBenchmark/"
      Object <|-- CisBenchmarkResult
        click CisBenchmarkResult href "../CisBenchmarkResult/"
      Object <|-- CisControl
        click CisControl href "../CisControl/"
      Object <|-- CisCsc
        click CisCsc href "../CisCsc/"
      Object <|-- ClassifierDetails
        click ClassifierDetails href "../ClassifierDetails/"
      Object <|-- Cloud
        click Cloud href "../Cloud/"
      Object <|-- Compliance
        click Compliance href "../Compliance/"
      Object <|-- Container
        click Container href "../Container/"
      Object <|-- Cve
        click Cve href "../Cve/"
      Object <|-- Cvss
        click Cvss href "../Cvss/"
      Object <|-- Cwe
        click Cwe href "../Cwe/"
      Object <|-- D3fend
        click D3fend href "../D3fend/"
      Object <|-- DataClassification
        click DataClassification href "../DataClassification/"
      Object <|-- DceRpc
        click DceRpc href "../DceRpc/"
      Object <|-- DeviceHwInfo
        click DeviceHwInfo href "../DeviceHwInfo/"
      Object <|-- DigitalSignature
        click DigitalSignature href "../DigitalSignature/"
      Object <|-- DiscoveryDetails
        click DiscoveryDetails href "../DiscoveryDetails/"
      Object <|-- Display
        click Display href "../Display/"
      Object <|-- DomainContact
        click DomainContact href "../DomainContact/"
      Object <|-- Email
        click Email href "../Email/"
      Object <|-- EmailAuth
        click EmailAuth href "../EmailAuth/"
      Object <|-- EncryptionDetails
        click EncryptionDetails href "../EncryptionDetails/"
      Object <|-- EndpointConnection
        click EndpointConnection href "../EndpointConnection/"
      Object <|-- Enrichment
        click Enrichment href "../Enrichment/"
      Object <|-- EnvironmentVariable
        click EnvironmentVariable href "../EnvironmentVariable/"
      Object <|-- Epss
        click Epss href "../Epss/"
      Object <|-- FindingObject
        click FindingObject href "../FindingObject/"
      Object <|-- FindingInfo
        click FindingInfo href "../FindingInfo/"
      Object <|-- Fingerprint
        click Fingerprint href "../Fingerprint/"
      Object <|-- FunctionInvocation
        click FunctionInvocation href "../FunctionInvocation/"
      Object <|-- GpuInfo
        click GpuInfo href "../GpuInfo/"
      Object <|-- Hassh
        click Hassh href "../Hassh/"
      Object <|-- HttpCookie
        click HttpCookie href "../HttpCookie/"
      Object <|-- HttpHeader
        click HttpHeader href "../HttpHeader/"
      Object <|-- HttpRequest
        click HttpRequest href "../HttpRequest/"
      Object <|-- HttpResponse
        click HttpResponse href "../HttpResponse/"
      Object <|-- IdentityActivityMetrics
        click IdentityActivityMetrics href "../IdentityActivityMetrics/"
      Object <|-- Ja4Fingerprint
        click Ja4Fingerprint href "../Ja4Fingerprint/"
      Object <|-- Job
        click Job href "../Job/"
      Object <|-- KbArticle
        click KbArticle href "../KbArticle/"
      Object <|-- Kernel
        click Kernel href "../Kernel/"
      Object <|-- KernelDriver
        click KernelDriver href "../KernelDriver/"
      Object <|-- KeyValueObject
        click KeyValueObject href "../KeyValueObject/"
      Object <|-- KeyboardInfo
        click KeyboardInfo href "../KeyboardInfo/"
      Object <|-- KillChainPhase
        click KillChainPhase href "../KillChainPhase/"
      Object <|-- LdapPerson
        click LdapPerson href "../LdapPerson/"
      Object <|-- Location
        click Location href "../Location/"
      Object <|-- LongString
        click LongString href "../LongString/"
      Object <|-- Metadata
        click Metadata href "../Metadata/"
      Object <|-- Metric
        click Metric href "../Metric/"
      Object <|-- Module
        click Module href "../Module/"
      Object <|-- NetworkConnectionInfo
        click NetworkConnectionInfo href "../NetworkConnectionInfo/"
      Object <|-- NetworkTraffic
        click NetworkTraffic href "../NetworkTraffic/"
      Object <|-- Node
        click Node href "../Node/"
      Object <|-- RegKey
        click RegKey href "../RegKey/"
      Object <|-- RegValue
        click RegValue href "../RegValue/"


Inheritance

Slots

Name Cardinality and Range Description Inheritance

Usages

used by used in type used
File xattributes range Object
Process xattributes range Object
BaseEvent unmapped range Object
ApplicationEvent unmapped range Object
ApiActivity unmapped range Object
ApplicationError unmapped range Object
ApplicationLifecycle unmapped range Object
DatastoreActivity unmapped range Object
FileHosting unmapped range Object
ScanActivity unmapped range Object
WebResourceAccessActivity unmapped range Object
WebResourcesActivity unmapped range Object
DiscoveryEvent unmapped range Object
AdminGroupQuery unmapped range Object
CloudResourcesInventoryInfo unmapped range Object
ConfigState unmapped range Object
DeviceConfigStateChange unmapped range Object
DiscoveryResult unmapped range Object
EvidenceInfo unmapped range Object
FileQuery unmapped range Object
FolderQuery unmapped range Object
InventoryInfo unmapped range Object
JobQuery unmapped range Object
KernelObjectQuery unmapped range Object
ModuleQuery unmapped range Object
NetworkConnectionQuery unmapped range Object
NetworksQuery unmapped range Object
OsintInventoryInfo unmapped range Object
PatchState unmapped range Object
PeripheralDeviceQuery unmapped range Object
ProcessQuery unmapped range Object
ServiceQuery unmapped range Object
SessionQuery unmapped range Object
SoftwareInfo unmapped range Object
StartupItemQuery unmapped range Object
UserInventory unmapped range Object
UserQuery unmapped range Object
ApplicationSecurityPostureFinding unmapped range Object
ComplianceFinding unmapped range Object
DataSecurityFinding unmapped range Object
DetectionFinding unmapped range Object
Finding unmapped range Object
IamAnalysisFinding unmapped range Object
IncidentFinding unmapped range Object
SecurityFinding unmapped range Object
VulnerabilityFinding unmapped range Object
IamEvent unmapped range Object
AccountChange unmapped range Object
Authentication unmapped range Object
AuthorizeSession unmapped range Object
EntityManagement unmapped range Object
GroupManagement unmapped range Object
UserAccess unmapped range Object
NetworkEvent unmapped range Object
DhcpActivity unmapped range Object
DnsActivity unmapped range Object
EmailActivity unmapped range Object
EmailFileActivity unmapped range Object
EmailUrlActivity unmapped range Object
FtpActivity unmapped range Object
HttpActivity unmapped range Object
NetworkActivity unmapped range Object
NetworkFileActivity unmapped range Object
NtpActivity unmapped range Object
RdpActivity unmapped range Object
SmbActivity unmapped range Object
SshActivity unmapped range Object
TunnelActivity unmapped range Object
FileRemediationActivity unmapped range Object
NetworkRemediationActivity unmapped range Object
ProcessRemediationActivity unmapped range Object
RemediationActivity unmapped range Object
SystemEvent unmapped range Object
EventLogActvity unmapped range Object
FileActivity unmapped range Object
KernelActivity unmapped range Object
KernelExtensionActivity unmapped range Object
MemoryActivity unmapped range Object
ModuleActivity unmapped range Object
PeripheralActivity unmapped range Object
ProcessActivity unmapped range Object
ScheduledJobActivity unmapped range Object
ScriptActivity unmapped range Object
UnmannedSystemsEvent unmapped range Object
AirborneBroadcastActivity unmapped range Object
DroneFlightsActivity unmapped range Object
LinuxProcess xattributes range Object
MacosProcess xattributes range Object
WindowsProcess xattributes range Object
PrefetchQuery unmapped range Object
RegistryKeyActivity unmapped range Object
RegistryKeyQuery unmapped range Object
RegistryValueActivity unmapped range Object
RegistryValueQuery unmapped range Object
WindowsResourceActivity unmapped range Object
WindowsServiceActivity unmapped range Object

In Subsets

Aliases

  • Object

Identifier and Mapping Information

Schema Source

Mappings

Mapping Type Mapped Value
self ocsf:Object
native ocsf:Object

LinkML Source

Direct

name: Object
description: 'An unordered collection of attributes. It defines a set of attributes
  available

  in all objects. It can be also used as a generic object to log objects that are

  not otherwise defined by the schema.'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Object
is_a: OcsfObject

Induced

name: Object
description: 'An unordered collection of attributes. It defines a set of attributes
  available

  in all objects. It can be also used as a generic object to log objects that are

  not otherwise defined by the schema.'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Object
is_a: OcsfObject