Class: Reputation

The Reputation object describes the reputation/risk score of an entity (e.g.

device, user, domain).

 classDiagram
    class Reputation
    click Reputation href "../Reputation/"
      Object <|-- Reputation
        click Object href "../Object/"

      Reputation : base_score

      Reputation : provider

      Reputation : score

      Reputation : score_id





        Reputation --> "1" ScoreIdEnum : score_id
        click ScoreIdEnum href "../ScoreIdEnum/"

Inheritance

OcsfObject
- Object
  - Reputation

Slots

Name	Cardinality and Range	Description	Inheritance
base_score	1 Float	The reputation score as reported by the event source	direct
provider	0..1 recommended String	The provider of the reputation information	direct
score	0..1 String	The reputation score, normalized to the caption of the score_id value	direct
score_id	1 ScoreIdEnum	The normalized reputation score identifier	direct

Usages

used by	used in	type	used
Observable	reputation	range	Reputation
Osint	reputation	range	Reputation
Enrichment	reputation	range	Reputation

In Subsets

objects_subset

Aliases

Reputation

Identifier and Mapping Information

Schema Source

from schema: https://w3id.org/lmodel/ocsf

Mappings

Mapping Type	Mapped Value
self	ocsf:Reputation
native	ocsf:Reputation

LinkML Source

Direct

name: Reputation
description: 'The Reputation object describes the reputation/risk score of an entity
  (e.g.

  device, user, domain).'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Reputation
is_a: Object
slots:
- base_score
- provider
- score
- score_id
slot_usage:
  base_score:
    name: base_score
    description: The reputation score as reported by the event source.
    required: true
  provider:
    name: provider
    description: The provider of the reputation information.
    recommended: true
  score_id:
    name: score_id
    required: true

Induced

name: Reputation
description: 'The Reputation object describes the reputation/risk score of an entity
  (e.g.

  device, user, domain).'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Reputation
is_a: Object
slot_usage:
  base_score:
    name: base_score
    description: The reputation score as reported by the event source.
    required: true
  provider:
    name: provider
    description: The provider of the reputation information.
    recommended: true
  score_id:
    name: score_id
    required: true
attributes:
  base_score:
    name: base_score
    description: The reputation score as reported by the event source.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Base Score
    rank: 1000
    alias: base_score
    owner: Reputation
    domain_of:
    - Reputation
    - Cvss
    range: float
    required: true
  provider:
    name: provider
    description: The provider of the reputation information.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Provider
    rank: 1000
    alias: provider
    owner: Reputation
    domain_of:
    - Reputation
    - AuthFactor
    - Cloud
    - Enrichment
    - Location
    - Malware
    - ResourceDetails
    range: string
    recommended: true
  score:
    name: score
    description: 'The reputation score, normalized to the caption of the score_id
      value. In the

      case of ''Other'', it is defined by the event source.'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Reputation Score
    rank: 1000
    alias: score
    owner: Reputation
    domain_of:
    - Reputation
    - Epss
    range: string
  score_id:
    name: score_id
    annotations:
      sibling:
        tag: sibling
        value: score
    description: The normalized reputation score identifier.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Reputation Score ID
    rank: 1000
    alias: score_id
    owner: Reputation
    domain_of:
    - Reputation
    range: ScoreIdEnum
    required: true