Class: OsintProfile

The OSINT (Open Source Intelligence) profile contains one or more indicators

and associated analysis and details, such as registrar (WHOIS) information and

commentary about a hostname, or information about a digital certificate and its

usage within a campaign. This information can be used to further enrich a

detection or finding by providing decisioning support to other analysts and

engineers within the profile itself.

 classDiagram
    class OsintProfile
    click OsintProfile href "../OsintProfile/"
      OsintProfile <|-- BaseEvent
        click BaseEvent href "../BaseEvent/"

      OsintProfile : osint





        OsintProfile --> "1..*" Osint : osint
        click Osint href "../Osint/"

Class Properties

Property	Value
Mixin	Yes

Slots

Name	Cardinality and Range	Description	Inheritance
osint	1..* Osint	The OSINT (Open Source Intelligence) object contains details related to an	direct

Mixin Usage

mixed into	description
BaseEvent	The base event is a generic and concrete event

In Subsets

osint_profile_subset

Aliases

OSINT

Identifier and Mapping Information

Annotations

property	value
ocsf_profile	osint

Schema Source

from schema: https://w3id.org/lmodel/ocsf

Mappings

Mapping Type	Mapped Value
self	ocsf:OsintProfile
native	ocsf:OsintProfile

LinkML Source

Direct

name: OsintProfile
annotations:
  ocsf_profile:
    tag: ocsf_profile
    value: osint
description: 'The OSINT (Open Source Intelligence) profile contains one or more indicators

  and associated analysis and details, such as registrar (WHOIS) information and

  commentary about a hostname, or information about a digital certificate and its

  usage within a campaign. This information can be used to further enrich a

  detection or finding by providing decisioning support to other analysts and

  engineers within the profile itself.'
in_subset:
- osint_profile_subset
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- OSINT
mixin: true
slots:
- osint
slot_usage:
  osint:
    name: osint
    annotations:
      group:
        tag: group
        value: primary
    required: true

Induced

name: OsintProfile
annotations:
  ocsf_profile:
    tag: ocsf_profile
    value: osint
description: 'The OSINT (Open Source Intelligence) profile contains one or more indicators

  and associated analysis and details, such as registrar (WHOIS) information and

  commentary about a hostname, or information about a digital certificate and its

  usage within a campaign. This information can be used to further enrich a

  detection or finding by providing decisioning support to other analysts and

  engineers within the profile itself.'
in_subset:
- osint_profile_subset
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- OSINT
mixin: true
slot_usage:
  osint:
    name: osint
    annotations:
      group:
        tag: group
        value: primary
    required: true
attributes:
  osint:
    name: osint
    annotations:
      group:
        tag: group
        value: primary
    description: 'The OSINT (Open Source Intelligence) object contains details related
      to an

      indicator such as the indicator itself, related indicators, geolocation,

      registrar information, subdomains, analyst commentary, and other contextual

      information. This information can be used to further enrich a detection or

      finding by providing decisioning support to other analysts and engineers.'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - OSINT
    rank: 1000
    alias: osint
    owner: OsintProfile
    domain_of:
    - OsintProfile
    - OsintInventoryInfo
    range: Osint
    required: true
    multivalued: true