Enum: ResourceDetailsRoleIdEnum
The normalized identifier of the resource's role in the context of the event or
finding.
URI: ocsf:ResourceDetailsRoleIdEnum
Permissible Values
| Value | Meaning | Description |
|---|---|---|
| TARGET | None | The resource is the primary target or subject of the event/finding |
| ACTOR | None | The resource is acting as the initiator or performer in the context of the |
| AFFECTED | None | The resource was impacted or affected by the event/finding |
| RELATED | None | The resource is related to or associated with the event/finding |
| UNKNOWN | None | The role is unknown |
| OTHER | None | The role is not mapped |
Slots
| Name | Description |
|---|---|
| role_id | The normalized identifier of the resource's role in the context of the event ... |
Identifier and Mapping Information
Schema Source
- from schema: https://w3id.org/lmodel/ocsf
LinkML Source
name: ResourceDetailsRoleIdEnum
description: 'The normalized identifier of the resource''s role in the context of
the event or
finding.'
from_schema: https://w3id.org/lmodel/ocsf
rank: 1000
permissible_values:
TARGET:
text: TARGET
description: The resource is the primary target or subject of the event/finding.
annotations:
ocsf_uid:
tag: ocsf_uid
value: '1'
caption:
tag: caption
value: Target
ACTOR:
text: ACTOR
description: 'The resource is acting as the initiator or performer in the context
of the
event/finding.'
annotations:
ocsf_uid:
tag: ocsf_uid
value: '2'
caption:
tag: caption
value: Actor
AFFECTED:
text: AFFECTED
description: The resource was impacted or affected by the event/finding.
annotations:
ocsf_uid:
tag: ocsf_uid
value: '3'
caption:
tag: caption
value: Affected
RELATED:
text: RELATED
description: The resource is related to or associated with the event/finding.
annotations:
ocsf_uid:
tag: ocsf_uid
value: '4'
caption:
tag: caption
value: Related
UNKNOWN:
text: UNKNOWN
description: The role is unknown.
annotations:
ocsf_uid:
tag: ocsf_uid
value: '0'
caption:
tag: caption
value: Unknown
OTHER:
text: OTHER
description: 'The role is not mapped. See the role attribute, which contains a
data source
specific value.'
annotations:
ocsf_uid:
tag: ocsf_uid
value: '99'
caption:
tag: caption
value: Other