Skip to content

Class: Organization

The Organization object describes characteristics of an organization or company

and its division if any. Additionally, it also describes cloud and

Software-as-a-Service (SaaS) logical hierarchies such as AWS Organizations,

Google Cloud Organizations, Oracle Cloud Tenancies, and similar constructs.

URI: ocsf:Organization

 classDiagram
    class Organization
    click Organization href "../Organization/"
      Entity <|-- Organization
        click Entity href "../Entity/"

      Organization : name

      Organization : ou_name

      Organization : ou_uid

      Organization : uid

Inheritance

Slots

Name Cardinality and Range Description Inheritance
name 0..1 recommended
String
The name of the organization, Oracle Cloud Tenancy, Google Cloud Organization... direct
ou_name 0..1 recommended
String
The name of an organizational unit, Google Cloud Folder, or AWS Org Unit direct
ou_uid 0..1
String
The unique identifier of an organizational unit, Google Cloud Folder, or AWS direct
uid 0..1 recommended
String
The unique identifier of the organization, Oracle Cloud Tenancy, Google Cloud direct

Usages

used by used in type used
Cloud org range Organization
ManagedEntity org range Organization
Reporter org range Organization
User org range Organization
Device org range Organization

In Subsets

Aliases

  • Organization

Identifier and Mapping Information

Schema Source

Mappings

Mapping Type Mapped Value
self ocsf:Organization
native ocsf:Organization
exact uco_master:Organization

LinkML Source

Direct

name: Organization
description: 'The Organization object describes characteristics of an organization
  or company

  and its division if any. Additionally, it also describes cloud and

  Software-as-a-Service (SaaS) logical hierarchies such as AWS Organizations,

  Google Cloud Organizations, Oracle Cloud Tenancies, and similar constructs.'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Organization
exact_mappings:
- uco_master:Organization
is_a: Entity
slots:
- name
- ou_name
- ou_uid
- uid
slot_usage:
  name:
    name: name
    description: 'The name of the organization, Oracle Cloud Tenancy, Google Cloud
      Organization,

      or AWS Organization. For example, <code> Widget, Inc. </code> or the <code>
      AWS

      Organization name </code>.'
  ou_name:
    name: ou_name
    description: 'The name of an organizational unit, Google Cloud Folder, or AWS
      Org Unit. For

      example, the <code> GCP Project Name </code>, or <code> Dev_Prod_OU </code>.'
    recommended: true
  ou_uid:
    name: ou_uid
    description: 'The unique identifier of an organizational unit, Google Cloud Folder,
      or AWS

      Org Unit. For example, an  <code> Oracle Cloud Tenancy ID </code>, <code> AWS

      OU ID </code>, or <code> GCP Folder ID </code>.'
  uid:
    name: uid
    description: 'The unique identifier of the organization, Oracle Cloud Tenancy,
      Google Cloud

      Organization, or AWS Organization. For example, an <code> AWS Org ID </code>
      or

      <code> Oracle Cloud Domain ID </code>.'

Induced

name: Organization
description: 'The Organization object describes characteristics of an organization
  or company

  and its division if any. Additionally, it also describes cloud and

  Software-as-a-Service (SaaS) logical hierarchies such as AWS Organizations,

  Google Cloud Organizations, Oracle Cloud Tenancies, and similar constructs.'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Organization
exact_mappings:
- uco_master:Organization
is_a: Entity
slot_usage:
  name:
    name: name
    description: 'The name of the organization, Oracle Cloud Tenancy, Google Cloud
      Organization,

      or AWS Organization. For example, <code> Widget, Inc. </code> or the <code>
      AWS

      Organization name </code>.'
  ou_name:
    name: ou_name
    description: 'The name of an organizational unit, Google Cloud Folder, or AWS
      Org Unit. For

      example, the <code> GCP Project Name </code>, or <code> Dev_Prod_OU </code>.'
    recommended: true
  ou_uid:
    name: ou_uid
    description: 'The unique identifier of an organizational unit, Google Cloud Folder,
      or AWS

      Org Unit. For example, an  <code> Oracle Cloud Tenancy ID </code>, <code> AWS

      OU ID </code>, or <code> GCP Folder ID </code>.'
  uid:
    name: uid
    description: 'The unique identifier of the organization, Oracle Cloud Tenancy,
      Google Cloud

      Organization, or AWS Organization. For example, an <code> AWS Org ID </code>
      or

      <code> Oracle Cloud Domain ID </code>.'
attributes:
  name:
    name: name
    description: 'The name of the organization, Oracle Cloud Tenancy, Google Cloud
      Organization,

      or AWS Organization. For example, <code> Widget, Inc. </code> or the <code>
      AWS

      Organization name </code>.'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Name
    rank: 1000
    alias: name
    owner: Organization
    domain_of:
    - AnalysisTarget
    - Observable
    - Os
    - Osint
    - Package
    - Parameter
    - PrivilegeInfo
    - San
    - Scim
    - Script
    - ServicePrivilegeAnalysis
    - SoftwareComponent
    - Sso
    - StartupItem
    - ThreatActor
    - Token
    - Entity
    - Resource
    - Account
    - Agent
    - AiModel
    - Aircraft
    - Analytic
    - ApplicationObject
    - Assessment
    - AutonomousSystem
    - Campaign
    - Check
    - CisBenchmark
    - CisBenchmarkResult
    - CisControl
    - ClassifierDetails
    - Container
    - D3fTactic
    - D3fTechnique
    - Database
    - Databucket
    - DomainContact
    - Edge
    - Endpoint
    - Enrichment
    - EnvironmentVariable
    - Evidences
    - Extension
    - Feature
    - File
    - Graph
    - Group
    - HttpCookie
    - HttpHeader
    - Idp
    - Image
    - Job
    - Kernel
    - KeyValueObject
    - LoadBalancer
    - Logger
    - Malware
    - ManagedEntity
    - MessageContext
    - Metric
    - Mitigation
    - NetworkInterface
    - Node
    - Organization
    - PeripheralDevice
    - Policy
    - ProcessEntity
    - Product
    - QueryInfo
    - Reporter
    - ResourceDetails
    - Rule
    - Scan
    - Service
    - SubTechnique
    - Table
    - Tactic
    - Technique
    - Trait
    - TransformationInfo
    - UnmannedAerialSystem
    - User
    - WebResource
    - Device
    - FtpActivity
    - RegValue
    - WinResource
    - WinService
    - PrefetchQuery
    range: string
    recommended: true
  ou_name:
    name: ou_name
    description: 'The name of an organizational unit, Google Cloud Folder, or AWS
      Org Unit. For

      example, the <code> GCP Project Name </code>, or <code> Dev_Prod_OU </code>.'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Org Unit Name
    rank: 1000
    alias: ou_name
    owner: Organization
    domain_of:
    - Organization
    range: string
    recommended: true
  ou_uid:
    name: ou_uid
    description: 'The unique identifier of an organizational unit, Google Cloud Folder,
      or AWS

      Org Unit. For example, an  <code> Oracle Cloud Tenancy ID </code>, <code> AWS

      OU ID </code>, or <code> GCP Folder ID </code>.'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Org Unit ID
    rank: 1000
    alias: ou_uid
    owner: Organization
    domain_of:
    - Organization
    range: string
  uid:
    name: uid
    description: 'The unique identifier of the organization, Oracle Cloud Tenancy,
      Google Cloud

      Organization, or AWS Organization. For example, an <code> AWS Org ID </code>
      or

      <code> Oracle Cloud Domain ID </code>.'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Unique ID
    rank: 1000
    alias: uid
    owner: Organization
    domain_of:
    - Osint
    - Package
    - ProgrammaticCredential
    - RelatedEvent
    - Request
    - Sbom
    - Scim
    - Script
    - Session
    - Span
    - Sso
    - Ticket
    - Token
    - Trace
    - Entity
    - Resource
    - Account
    - Advisory
    - Agent
    - AiModel
    - Aircraft
    - Analytic
    - ApplicationObject
    - Assessment
    - Certificate
    - Check
    - ClassifierDetails
    - Container
    - Cve
    - Cwe
    - D3fTactic
    - D3fTechnique
    - DataClassification
    - Database
    - Databucket
    - DomainContact
    - Edge
    - Email
    - Endpoint
    - Evidences
    - Extension
    - Feature
    - File
    - FindingObject
    - FindingInfo
    - Graph
    - Group
    - HttpRequest
    - Idp
    - Image
    - KbArticle
    - LoadBalancer
    - Logger
    - Malware
    - ManagedEntity
    - MessageContext
    - Metadata
    - Mitigation
    - NetworkConnectionInfo
    - NetworkEndpoint
    - NetworkInterface
    - Node
    - Organization
    - PeripheralDevice
    - Policy
    - ProcessEntity
    - Product
    - QueryInfo
    - Reporter
    - Rule
    - Scan
    - Service
    - SubTechnique
    - Table
    - Tactic
    - Technique
    - Trait
    - TransformationInfo
    - UnmannedAerialSystem
    - User
    - WebResource
    - Device
    - WinResource
    range: string
    recommended: true