Skip to content

Enum: ResourceDetailsRoleIdEnum

The normalized identifier of the resource's role in the context of the event or

finding.

URI: ocsf:ResourceDetailsRoleIdEnum

Permissible Values

Value Meaning Description
TARGET None The resource is the primary target or subject of the event/finding
ACTOR None The resource is acting as the initiator or performer in the context of the
AFFECTED None The resource was impacted or affected by the event/finding
RELATED None The resource is related to or associated with the event/finding
UNKNOWN None The role is unknown
OTHER None The role is not mapped

Slots

Name Description
role_id The normalized identifier of the resource's role in the context of the event ...

Identifier and Mapping Information

Schema Source

LinkML Source

name: ResourceDetailsRoleIdEnum
description: 'The normalized identifier of the resource''s role in the context of
  the event or

  finding.'
from_schema: https://w3id.org/lmodel/ocsf
rank: 1000
permissible_values:
  TARGET:
    text: TARGET
    description: The resource is the primary target or subject of the event/finding.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '1'
      caption:
        tag: caption
        value: Target
  ACTOR:
    text: ACTOR
    description: 'The resource is acting as the initiator or performer in the context
      of the

      event/finding.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '2'
      caption:
        tag: caption
        value: Actor
  AFFECTED:
    text: AFFECTED
    description: The resource was impacted or affected by the event/finding.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '3'
      caption:
        tag: caption
        value: Affected
  RELATED:
    text: RELATED
    description: The resource is related to or associated with the event/finding.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '4'
      caption:
        tag: caption
        value: Related
  UNKNOWN:
    text: UNKNOWN
    description: The role is unknown.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '0'
      caption:
        tag: caption
        value: Unknown
  OTHER:
    text: OTHER
    description: 'The role is not mapped. See the role attribute, which contains a
      data source

      specific value.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '99'
      caption:
        tag: caption
        value: Other