Class: Resource
The Resource object contains attributes that provide information about a
particular resource. It serves as a base object, offering attributes that help
identify and classify the resource effectively.
URI: ocsf:Resource
classDiagram
class Resource
click Resource href "../Resource/"
DataClassificationProfile <|-- Resource
click DataClassificationProfile href "../DataClassificationProfile/"
Entity <|-- Resource
click Entity href "../Entity/"
Resource <|-- Databucket
click Databucket href "../Databucket/"
Resource <|-- ResourceDetails
click ResourceDetails href "../ResourceDetails/"
Resource <|-- WebResource
click WebResource href "../WebResource/"
Resource <|-- WinResource
click WinResource href "../WinResource/"
Resource : created_time
Resource : data
Resource : data_classification
Resource --> "0..1 _recommended_" DataClassification : data_classification
click DataClassification href "../DataClassification/"
Resource : data_classifications
Resource --> "* _recommended_" DataClassification : data_classifications
click DataClassification href "../DataClassification/"
Resource : labels
Resource : modified_time
Resource : name
Resource : tags
Resource --> "*" KeyValueObject : tags
click KeyValueObject href "../KeyValueObject/"
Resource : type
Resource : uid
Resource : uid_alt
Inheritance
Slots
| Name | Cardinality and Range | Description | Inheritance |
|---|---|---|---|
| created_time | 0..1 TimestampT |
The time when the resource was created | direct |
| data | 0..1 String |
Additional data describing the resource | direct |
| labels | * String |
The list of labels associated to the resource | direct |
| modified_time | 0..1 TimestampT |
The time when the resource was last modified | direct |
| name | 0..1 recommended String |
The name of the resource | direct |
| tags | * KeyValueObject |
The list of tags; {key:value} pairs associated to the resource |
direct |
| type | 0..1 String |
The resource type as defined by the event source | direct |
| uid | 0..1 recommended String |
The unique identifier of the resource | direct |
| uid_alt | 0..1 String |
The alternative unique identifier of the resource | direct |
| data_classification | 0..1 recommended DataClassification |
The Data Classification object includes information about data classification | DataClassificationProfile |
| data_classifications | * recommended DataClassification |
A list of Data Classification objects, that include information about data | DataClassificationProfile |
In Subsets
Aliases
- Resource
Identifier and Mapping Information
Schema Source
- from schema: https://w3id.org/lmodel/ocsf
Mappings
| Mapping Type | Mapped Value |
|---|---|
| self | ocsf:Resource |
| native | ocsf:Resource |
LinkML Source
Direct
name: Resource
description: 'The Resource object contains attributes that provide information about
a
particular resource. It serves as a base object, offering attributes that help
identify and classify the resource effectively.'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Resource
is_a: Entity
mixins:
- DataClassificationProfile
slots:
- created_time
- data
- labels
- modified_time
- name
- tags
- type
- uid
- uid_alt
slot_usage:
created_time:
name: created_time
description: The time when the resource was created.
data:
name: data
description: Additional data describing the resource.
labels:
name: labels
description: The list of labels associated to the resource.
modified_time:
name: modified_time
description: The time when the resource was last modified.
name:
name: name
description: The name of the resource.
tags:
name: tags
description: The list of tags; <code>{key:value}</code> pairs associated to the
resource.
type:
name: type
description: The resource type as defined by the event source.
uid:
name: uid
description: The unique identifier of the resource.
uid_alt:
name: uid_alt
description: The alternative unique identifier of the resource.
Induced
name: Resource
description: 'The Resource object contains attributes that provide information about
a
particular resource. It serves as a base object, offering attributes that help
identify and classify the resource effectively.'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Resource
is_a: Entity
mixins:
- DataClassificationProfile
slot_usage:
created_time:
name: created_time
description: The time when the resource was created.
data:
name: data
description: Additional data describing the resource.
labels:
name: labels
description: The list of labels associated to the resource.
modified_time:
name: modified_time
description: The time when the resource was last modified.
name:
name: name
description: The name of the resource.
tags:
name: tags
description: The list of tags; <code>{key:value}</code> pairs associated to the
resource.
type:
name: type
description: The resource type as defined by the event source.
uid:
name: uid
description: The unique identifier of the resource.
uid_alt:
name: uid_alt
description: The alternative unique identifier of the resource.
attributes:
created_time:
name: created_time
description: The time when the resource was created.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Created Time
rank: 1000
alias: created_time
owner: Resource
domain_of:
- Osint
- RelatedEvent
- Sbom
- Scim
- Session
- Sso
- Token
- Whois
- Resource
- Advisory
- AuthenticationToken
- Certificate
- Cve
- Database
- Databucket
- DigitalSignature
- Enrichment
- Epss
- File
- FindingObject
- FindingInfo
- Job
- KbArticle
- LdapPerson
- ProcessEntity
- Table
- Device
range: TimestampT
data:
name: data
description: Additional data describing the resource.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Data
rank: 1000
alias: data
owner: Resource
domain_of:
- Request
- Response
- TlsExtension
- Resource
- ApplicationObject
- Edge
- Enrichment
- Evidences
- ManagedEntity
- Node
- Policy
- QueryInfo
- WebResource
- RegValue
range: string
labels:
name: labels
description: The list of labels associated to the resource.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Labels
rank: 1000
alias: labels
owner: Resource
domain_of:
- Osint
- Resource
- Account
- ApplicationObject
- Container
- Image
- LdapPerson
- Metadata
- Service
range: string
multivalued: true
modified_time:
name: modified_time
description: The time when the resource was last modified.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Modified Time
rank: 1000
alias: modified_time
owner: Resource
domain_of:
- Osint
- RelatedEvent
- Scim
- Sso
- Token
- Resource
- Advisory
- Cve
- Database
- Databucket
- File
- FindingObject
- FindingInfo
- LdapPerson
- Metadata
- Table
- Device
- RegKey
- RegValue
range: TimestampT
name:
name: name
description: The name of the resource.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Name
rank: 1000
alias: name
owner: Resource
domain_of:
- AnalysisTarget
- Observable
- Os
- Osint
- Package
- Parameter
- PrivilegeInfo
- San
- Scim
- Script
- ServicePrivilegeAnalysis
- SoftwareComponent
- Sso
- StartupItem
- ThreatActor
- Token
- Entity
- Resource
- Account
- Agent
- AiModel
- Aircraft
- Analytic
- ApplicationObject
- Assessment
- AutonomousSystem
- Campaign
- Check
- CisBenchmark
- CisBenchmarkResult
- CisControl
- ClassifierDetails
- Container
- D3fTactic
- D3fTechnique
- Database
- Databucket
- DomainContact
- Edge
- Endpoint
- Enrichment
- EnvironmentVariable
- Evidences
- Extension
- Feature
- File
- Graph
- Group
- HttpCookie
- HttpHeader
- Idp
- Image
- Job
- Kernel
- KeyValueObject
- LoadBalancer
- Logger
- Malware
- ManagedEntity
- MessageContext
- Metric
- Mitigation
- NetworkInterface
- Node
- Organization
- PeripheralDevice
- Policy
- ProcessEntity
- Product
- QueryInfo
- Reporter
- ResourceDetails
- Rule
- Scan
- Service
- SubTechnique
- Table
- Tactic
- Technique
- Trait
- TransformationInfo
- UnmannedAerialSystem
- User
- WebResource
- Device
- FtpActivity
- RegValue
- WinResource
- WinService
- PrefetchQuery
range: string
recommended: true
tags:
name: tags
description: The list of tags; <code>{key:value}</code> pairs associated to the
resource.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Tags
rank: 1000
alias: tags
owner: Resource
domain_of:
- RelatedEvent
- Resource
- Account
- ApplicationObject
- Container
- File
- FindingInfo
- Image
- LdapPerson
- Metadata
- Service
range: KeyValueObject
multivalued: true
type:
name: type
description: The resource type as defined by the event source.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Type
rank: 1000
alias: type
owner: Resource
domain_of:
- AnalysisTarget
- Observable
- Os
- Osint
- Package
- PrivilegeInfo
- ProgrammaticCredential
- RelatedEvent
- San
- Sbom
- Script
- SoftwareComponent
- StartupItem
- ThreatActor
- Ticket
- Timespan
- TlsExtension
- Token
- Dns
- Resource
- Account
- Agent
- Analytic
- ApplicationObject
- AuthenticationToken
- ClassifierDetails
- Cve
- Database
- Databucket
- DiscoveryDetails
- DnsAnswer
- DomainContact
- EncryptionDetails
- Endpoint
- Enrichment
- File
- Graph
- Group
- Ja4Fingerprint
- Kernel
- ManagedEntity
- Metadata
- Module
- NetworkEndpoint
- NetworkInterface
- Node
- PeripheralDevice
- Policy
- Rule
- Scan
- Trait
- UnmannedAerialSystem
- UnmannedSystemOperatingArea
- User
- WebResource
- Device
- DatastoreActivity
- FtpActivity
- RegValue
- WinResource
range: string
uid:
name: uid
description: The unique identifier of the resource.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Unique ID
rank: 1000
alias: uid
owner: Resource
domain_of:
- Osint
- Package
- ProgrammaticCredential
- RelatedEvent
- Request
- Sbom
- Scim
- Script
- Session
- Span
- Sso
- Ticket
- Token
- Trace
- Entity
- Resource
- Account
- Advisory
- Agent
- AiModel
- Aircraft
- Analytic
- ApplicationObject
- Assessment
- Certificate
- Check
- ClassifierDetails
- Container
- Cve
- Cwe
- D3fTactic
- D3fTechnique
- DataClassification
- Database
- Databucket
- DomainContact
- Edge
- Email
- Endpoint
- Evidences
- Extension
- Feature
- File
- FindingObject
- FindingInfo
- Graph
- Group
- HttpRequest
- Idp
- Image
- KbArticle
- LoadBalancer
- Logger
- Malware
- ManagedEntity
- MessageContext
- Metadata
- Mitigation
- NetworkConnectionInfo
- NetworkEndpoint
- NetworkInterface
- Node
- Organization
- PeripheralDevice
- Policy
- ProcessEntity
- Product
- QueryInfo
- Reporter
- Rule
- Scan
- Service
- SubTechnique
- Table
- Tactic
- Technique
- Trait
- TransformationInfo
- UnmannedAerialSystem
- User
- WebResource
- Device
- WinResource
range: string
recommended: true
uid_alt:
name: uid_alt
description: The alternative unique identifier of the resource.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Alternate ID
rank: 1000
alias: uid_alt
owner: Resource
domain_of:
- Scim
- Session
- Resource
- Agent
- Aircraft
- ApplicationObject
- FindingInfo
- Group
- UnmannedAerialSystem
- User
- Device
range: string
data_classification:
name: data_classification
annotations:
group:
tag: group
value: context
description: 'The Data Classification object includes information about data classification
levels and data category types.'
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Data Classification
rank: 1000
alias: data_classification
owner: Resource
domain_of:
- DataClassificationProfile
range: DataClassification
recommended: true
data_classifications:
name: data_classifications
annotations:
group:
tag: group
value: context
description: 'A list of Data Classification objects, that include information
about data
classification levels and data category types, identified by a classifier.'
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Data Classification
rank: 1000
alias: data_classifications
owner: Resource
domain_of:
- DataClassificationProfile
range: DataClassification
recommended: true
multivalued: true