Skip to content

Enum: ScanTypeIdEnum

The type id of the scan.

URI: ocsf:ScanTypeIdEnum

Permissible Values

Value Meaning Description
UNKNOWN None Unknown
MANUAL None The scan was manually initiated by the user or administrator
SCHEDULED None The scan was started based on scheduler
UPDATED_CONTENT None The scan was triggered by a content update
QUARANTINED_ITEMS None The scan was triggered by newly quarantined items
ATTACHED_MEDIA None The scan was triggered by the attachment of removable media
USER_LOGON None The scan was started due to a user logon
ELAM None The scan was triggered by an Early Launch Anti-Malware (ELAM) detection
OTHER None The scan type id is not mapped

Slots

Name Description
type_id The type id of the scan

Identifier and Mapping Information

Schema Source

LinkML Source

name: ScanTypeIdEnum
description: The type id of the scan.
from_schema: https://w3id.org/lmodel/ocsf
rank: 1000
permissible_values:
  UNKNOWN:
    text: UNKNOWN
    description: Unknown
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '0'
      caption:
        tag: caption
        value: Unknown
  MANUAL:
    text: MANUAL
    description: The scan was manually initiated by the user or administrator.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '1'
      caption:
        tag: caption
        value: Manual
  SCHEDULED:
    text: SCHEDULED
    description: The scan was started based on scheduler.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '2'
      caption:
        tag: caption
        value: Scheduled
  UPDATED_CONTENT:
    text: UPDATED_CONTENT
    description: The scan was triggered by a content update.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '3'
      caption:
        tag: caption
        value: Updated Content
  QUARANTINED_ITEMS:
    text: QUARANTINED_ITEMS
    description: The scan was triggered by newly quarantined items.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '4'
      caption:
        tag: caption
        value: Quarantined Items
  ATTACHED_MEDIA:
    text: ATTACHED_MEDIA
    description: The scan was triggered by the attachment of removable media.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '5'
      caption:
        tag: caption
        value: Attached Media
  USER_LOGON:
    text: USER_LOGON
    description: The scan was started due to a user logon.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '6'
      caption:
        tag: caption
        value: User Logon
  ELAM:
    text: ELAM
    description: The scan was triggered by an Early Launch Anti-Malware (ELAM) detection.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '7'
      caption:
        tag: caption
        value: ELAM
  OTHER:
    text: OTHER
    description: 'The scan type id is not mapped. See the <code>type</code> attribute,
      which

      contains a data source specific value.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '99'
      caption:
        tag: caption
        value: Other