Enum: ScanTypeIdEnum
The type id of the scan.
URI: ocsf:ScanTypeIdEnum
Permissible Values
| Value | Meaning | Description |
|---|---|---|
| UNKNOWN | None | Unknown |
| MANUAL | None | The scan was manually initiated by the user or administrator |
| SCHEDULED | None | The scan was started based on scheduler |
| UPDATED_CONTENT | None | The scan was triggered by a content update |
| QUARANTINED_ITEMS | None | The scan was triggered by newly quarantined items |
| ATTACHED_MEDIA | None | The scan was triggered by the attachment of removable media |
| USER_LOGON | None | The scan was started due to a user logon |
| ELAM | None | The scan was triggered by an Early Launch Anti-Malware (ELAM) detection |
| OTHER | None | The scan type id is not mapped |
Slots
| Name | Description |
|---|---|
| type_id | The type id of the scan |
Identifier and Mapping Information
Schema Source
- from schema: https://w3id.org/lmodel/ocsf
LinkML Source
name: ScanTypeIdEnum
description: The type id of the scan.
from_schema: https://w3id.org/lmodel/ocsf
rank: 1000
permissible_values:
UNKNOWN:
text: UNKNOWN
description: Unknown
annotations:
ocsf_uid:
tag: ocsf_uid
value: '0'
caption:
tag: caption
value: Unknown
MANUAL:
text: MANUAL
description: The scan was manually initiated by the user or administrator.
annotations:
ocsf_uid:
tag: ocsf_uid
value: '1'
caption:
tag: caption
value: Manual
SCHEDULED:
text: SCHEDULED
description: The scan was started based on scheduler.
annotations:
ocsf_uid:
tag: ocsf_uid
value: '2'
caption:
tag: caption
value: Scheduled
UPDATED_CONTENT:
text: UPDATED_CONTENT
description: The scan was triggered by a content update.
annotations:
ocsf_uid:
tag: ocsf_uid
value: '3'
caption:
tag: caption
value: Updated Content
QUARANTINED_ITEMS:
text: QUARANTINED_ITEMS
description: The scan was triggered by newly quarantined items.
annotations:
ocsf_uid:
tag: ocsf_uid
value: '4'
caption:
tag: caption
value: Quarantined Items
ATTACHED_MEDIA:
text: ATTACHED_MEDIA
description: The scan was triggered by the attachment of removable media.
annotations:
ocsf_uid:
tag: ocsf_uid
value: '5'
caption:
tag: caption
value: Attached Media
USER_LOGON:
text: USER_LOGON
description: The scan was started due to a user logon.
annotations:
ocsf_uid:
tag: ocsf_uid
value: '6'
caption:
tag: caption
value: User Logon
ELAM:
text: ELAM
description: The scan was triggered by an Early Launch Anti-Malware (ELAM) detection.
annotations:
ocsf_uid:
tag: ocsf_uid
value: '7'
caption:
tag: caption
value: ELAM
OTHER:
text: OTHER
description: 'The scan type id is not mapped. See the <code>type</code> attribute,
which
contains a data source specific value.'
annotations:
ocsf_uid:
tag: ocsf_uid
value: '99'
caption:
tag: caption
value: Other