Skip to content

Class: Resource

The Resource object contains attributes that provide information about a

particular resource. It serves as a base object, offering attributes that help

identify and classify the resource effectively.

URI: ocsf:Resource

 classDiagram
    class Resource
    click Resource href "../Resource/"
      DataClassificationProfile <|-- Resource
        click DataClassificationProfile href "../DataClassificationProfile/"
      Entity <|-- Resource
        click Entity href "../Entity/"


      Resource <|-- Databucket
        click Databucket href "../Databucket/"
      Resource <|-- ResourceDetails
        click ResourceDetails href "../ResourceDetails/"
      Resource <|-- WebResource
        click WebResource href "../WebResource/"
      Resource <|-- WinResource
        click WinResource href "../WinResource/"


      Resource : created_time

      Resource : data

      Resource : data_classification





        Resource --> "0..1 _recommended_" DataClassification : data_classification
        click DataClassification href "../DataClassification/"



      Resource : data_classifications





        Resource --> "* _recommended_" DataClassification : data_classifications
        click DataClassification href "../DataClassification/"



      Resource : labels

      Resource : modified_time

      Resource : name

      Resource : tags





        Resource --> "*" KeyValueObject : tags
        click KeyValueObject href "../KeyValueObject/"



      Resource : type

      Resource : uid

      Resource : uid_alt

Inheritance

Slots

Name Cardinality and Range Description Inheritance
created_time 0..1
TimestampT
The time when the resource was created direct
data 0..1
String
Additional data describing the resource direct
labels *
String
The list of labels associated to the resource direct
modified_time 0..1
TimestampT
The time when the resource was last modified direct
name 0..1 recommended
String
The name of the resource direct
tags *
KeyValueObject
The list of tags; {key:value} pairs associated to the resource direct
type 0..1
String
The resource type as defined by the event source direct
uid 0..1 recommended
String
The unique identifier of the resource direct
uid_alt 0..1
String
The alternative unique identifier of the resource direct
data_classification 0..1 recommended
DataClassification
The Data Classification object includes information about data classification DataClassificationProfile
data_classifications * recommended
DataClassification
A list of Data Classification objects, that include information about data DataClassificationProfile

In Subsets

Aliases

  • Resource

Identifier and Mapping Information

Schema Source

Mappings

Mapping Type Mapped Value
self ocsf:Resource
native ocsf:Resource

LinkML Source

Direct

name: Resource
description: 'The Resource object contains attributes that provide information about
  a

  particular resource. It serves as a base object, offering attributes that help

  identify and classify the resource effectively.'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Resource
is_a: Entity
mixins:
- DataClassificationProfile
slots:
- created_time
- data
- labels
- modified_time
- name
- tags
- type
- uid
- uid_alt
slot_usage:
  created_time:
    name: created_time
    description: The time when the resource was created.
  data:
    name: data
    description: Additional data describing the resource.
  labels:
    name: labels
    description: The list of labels associated to the resource.
  modified_time:
    name: modified_time
    description: The time when the resource was last modified.
  name:
    name: name
    description: The name of the resource.
  tags:
    name: tags
    description: The list of tags; <code>{key:value}</code> pairs associated to the
      resource.
  type:
    name: type
    description: The resource type as defined by the event source.
  uid:
    name: uid
    description: The unique identifier of the resource.
  uid_alt:
    name: uid_alt
    description: The alternative unique identifier of the resource.

Induced

name: Resource
description: 'The Resource object contains attributes that provide information about
  a

  particular resource. It serves as a base object, offering attributes that help

  identify and classify the resource effectively.'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Resource
is_a: Entity
mixins:
- DataClassificationProfile
slot_usage:
  created_time:
    name: created_time
    description: The time when the resource was created.
  data:
    name: data
    description: Additional data describing the resource.
  labels:
    name: labels
    description: The list of labels associated to the resource.
  modified_time:
    name: modified_time
    description: The time when the resource was last modified.
  name:
    name: name
    description: The name of the resource.
  tags:
    name: tags
    description: The list of tags; <code>{key:value}</code> pairs associated to the
      resource.
  type:
    name: type
    description: The resource type as defined by the event source.
  uid:
    name: uid
    description: The unique identifier of the resource.
  uid_alt:
    name: uid_alt
    description: The alternative unique identifier of the resource.
attributes:
  created_time:
    name: created_time
    description: The time when the resource was created.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Created Time
    rank: 1000
    alias: created_time
    owner: Resource
    domain_of:
    - Osint
    - RelatedEvent
    - Sbom
    - Scim
    - Session
    - Sso
    - Token
    - Whois
    - Resource
    - Advisory
    - AuthenticationToken
    - Certificate
    - Cve
    - Database
    - Databucket
    - DigitalSignature
    - Enrichment
    - Epss
    - File
    - FindingObject
    - FindingInfo
    - Job
    - KbArticle
    - LdapPerson
    - ProcessEntity
    - Table
    - Device
    range: TimestampT
  data:
    name: data
    description: Additional data describing the resource.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Data
    rank: 1000
    alias: data
    owner: Resource
    domain_of:
    - Request
    - Response
    - TlsExtension
    - Resource
    - ApplicationObject
    - Edge
    - Enrichment
    - Evidences
    - ManagedEntity
    - Node
    - Policy
    - QueryInfo
    - WebResource
    - RegValue
    range: string
  labels:
    name: labels
    description: The list of labels associated to the resource.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Labels
    rank: 1000
    alias: labels
    owner: Resource
    domain_of:
    - Osint
    - Resource
    - Account
    - ApplicationObject
    - Container
    - Image
    - LdapPerson
    - Metadata
    - Service
    range: string
    multivalued: true
  modified_time:
    name: modified_time
    description: The time when the resource was last modified.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Modified Time
    rank: 1000
    alias: modified_time
    owner: Resource
    domain_of:
    - Osint
    - RelatedEvent
    - Scim
    - Sso
    - Token
    - Resource
    - Advisory
    - Cve
    - Database
    - Databucket
    - File
    - FindingObject
    - FindingInfo
    - LdapPerson
    - Metadata
    - Table
    - Device
    - RegKey
    - RegValue
    range: TimestampT
  name:
    name: name
    description: The name of the resource.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Name
    rank: 1000
    alias: name
    owner: Resource
    domain_of:
    - AnalysisTarget
    - Observable
    - Os
    - Osint
    - Package
    - Parameter
    - PrivilegeInfo
    - San
    - Scim
    - Script
    - ServicePrivilegeAnalysis
    - SoftwareComponent
    - Sso
    - StartupItem
    - ThreatActor
    - Token
    - Entity
    - Resource
    - Account
    - Agent
    - AiModel
    - Aircraft
    - Analytic
    - ApplicationObject
    - Assessment
    - AutonomousSystem
    - Campaign
    - Check
    - CisBenchmark
    - CisBenchmarkResult
    - CisControl
    - ClassifierDetails
    - Container
    - D3fTactic
    - D3fTechnique
    - Database
    - Databucket
    - DomainContact
    - Edge
    - Endpoint
    - Enrichment
    - EnvironmentVariable
    - Evidences
    - Extension
    - Feature
    - File
    - Graph
    - Group
    - HttpCookie
    - HttpHeader
    - Idp
    - Image
    - Job
    - Kernel
    - KeyValueObject
    - LoadBalancer
    - Logger
    - Malware
    - ManagedEntity
    - MessageContext
    - Metric
    - Mitigation
    - NetworkInterface
    - Node
    - Organization
    - PeripheralDevice
    - Policy
    - ProcessEntity
    - Product
    - QueryInfo
    - Reporter
    - ResourceDetails
    - Rule
    - Scan
    - Service
    - SubTechnique
    - Table
    - Tactic
    - Technique
    - Trait
    - TransformationInfo
    - UnmannedAerialSystem
    - User
    - WebResource
    - Device
    - FtpActivity
    - RegValue
    - WinResource
    - WinService
    - PrefetchQuery
    range: string
    recommended: true
  tags:
    name: tags
    description: The list of tags; <code>{key:value}</code> pairs associated to the
      resource.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Tags
    rank: 1000
    alias: tags
    owner: Resource
    domain_of:
    - RelatedEvent
    - Resource
    - Account
    - ApplicationObject
    - Container
    - File
    - FindingInfo
    - Image
    - LdapPerson
    - Metadata
    - Service
    range: KeyValueObject
    multivalued: true
  type:
    name: type
    description: The resource type as defined by the event source.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Type
    rank: 1000
    alias: type
    owner: Resource
    domain_of:
    - AnalysisTarget
    - Observable
    - Os
    - Osint
    - Package
    - PrivilegeInfo
    - ProgrammaticCredential
    - RelatedEvent
    - San
    - Sbom
    - Script
    - SoftwareComponent
    - StartupItem
    - ThreatActor
    - Ticket
    - Timespan
    - TlsExtension
    - Token
    - Dns
    - Resource
    - Account
    - Agent
    - Analytic
    - ApplicationObject
    - AuthenticationToken
    - ClassifierDetails
    - Cve
    - Database
    - Databucket
    - DiscoveryDetails
    - DnsAnswer
    - DomainContact
    - EncryptionDetails
    - Endpoint
    - Enrichment
    - File
    - Graph
    - Group
    - Ja4Fingerprint
    - Kernel
    - ManagedEntity
    - Metadata
    - Module
    - NetworkEndpoint
    - NetworkInterface
    - Node
    - PeripheralDevice
    - Policy
    - Rule
    - Scan
    - Trait
    - UnmannedAerialSystem
    - UnmannedSystemOperatingArea
    - User
    - WebResource
    - Device
    - DatastoreActivity
    - FtpActivity
    - RegValue
    - WinResource
    range: string
  uid:
    name: uid
    description: The unique identifier of the resource.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Unique ID
    rank: 1000
    alias: uid
    owner: Resource
    domain_of:
    - Osint
    - Package
    - ProgrammaticCredential
    - RelatedEvent
    - Request
    - Sbom
    - Scim
    - Script
    - Session
    - Span
    - Sso
    - Ticket
    - Token
    - Trace
    - Entity
    - Resource
    - Account
    - Advisory
    - Agent
    - AiModel
    - Aircraft
    - Analytic
    - ApplicationObject
    - Assessment
    - Certificate
    - Check
    - ClassifierDetails
    - Container
    - Cve
    - Cwe
    - D3fTactic
    - D3fTechnique
    - DataClassification
    - Database
    - Databucket
    - DomainContact
    - Edge
    - Email
    - Endpoint
    - Evidences
    - Extension
    - Feature
    - File
    - FindingObject
    - FindingInfo
    - Graph
    - Group
    - HttpRequest
    - Idp
    - Image
    - KbArticle
    - LoadBalancer
    - Logger
    - Malware
    - ManagedEntity
    - MessageContext
    - Metadata
    - Mitigation
    - NetworkConnectionInfo
    - NetworkEndpoint
    - NetworkInterface
    - Node
    - Organization
    - PeripheralDevice
    - Policy
    - ProcessEntity
    - Product
    - QueryInfo
    - Reporter
    - Rule
    - Scan
    - Service
    - SubTechnique
    - Table
    - Tactic
    - Technique
    - Trait
    - TransformationInfo
    - UnmannedAerialSystem
    - User
    - WebResource
    - Device
    - WinResource
    range: string
    recommended: true
  uid_alt:
    name: uid_alt
    description: The alternative unique identifier of the resource.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Alternate ID
    rank: 1000
    alias: uid_alt
    owner: Resource
    domain_of:
    - Scim
    - Session
    - Resource
    - Agent
    - Aircraft
    - ApplicationObject
    - FindingInfo
    - Group
    - UnmannedAerialSystem
    - User
    - Device
    range: string
  data_classification:
    name: data_classification
    annotations:
      group:
        tag: group
        value: context
    description: 'The Data Classification object includes information about data classification

      levels and data category types.'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Data Classification
    rank: 1000
    alias: data_classification
    owner: Resource
    domain_of:
    - DataClassificationProfile
    range: DataClassification
    recommended: true
  data_classifications:
    name: data_classifications
    annotations:
      group:
        tag: group
        value: context
    description: 'A list of Data Classification objects, that include information
      about data

      classification levels and data category types, identified by a classifier.'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Data Classification
    rank: 1000
    alias: data_classifications
    owner: Resource
    domain_of:
    - DataClassificationProfile
    range: DataClassification
    recommended: true
    multivalued: true