Skip to content

Class: Service

The Service object describes characteristics of a service, e.g. AWS EC2.

URI: ocsf:Service

 classDiagram
    class Service
    click Service href "../Service/"
      Entity <|-- Service
        click Entity href "../Entity/"


      Service <|-- WinService
        click WinService href "../WinService/"


      Service : labels

      Service : name

      Service : tags





        Service --> "*" KeyValueObject : tags
        click KeyValueObject href "../KeyValueObject/"



      Service : uid

      Service : version

Inheritance

Slots

Name Cardinality and Range Description Inheritance
labels *
String		 The list of labels associated with the service direct
name 0..1 recommended
String		 The name of the service direct
tags *
KeyValueObject		 The list of tags; {key:value} pairs associated to the service direct
uid 0..1 recommended
String		 The unique identifier of the service direct
version 0..1 recommended
String		 The version of the service direct

Usages

used by used in type used
QueryEvidence service range Service
Span service range Service
Trace service range Service
Api service range Service
MessageContext service range Service
ServiceQuery service range Service
Authentication service range Service
WindowsQueryEvidence service range Service

In Subsets

Aliases

  • Service

See Also

Notes

Identifier and Mapping Information

Schema Source

Mappings

Mapping Type Mapped Value
self ocsf:Service
native ocsf:Service
close uco_master:OnlineService

LinkML Source

Direct

name: Service
description: 'The Service object describes characteristics of a service, <code> e.g.
  AWS EC2.

  </code>'
notes:
- 'D3FEND™ Ontology d3f:ServiceApplication. —

  https://d3fend.mitre.org/dao/artifact/d3f:ServiceApplication/'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
see_also:
- https://d3fend.mitre.org/dao/artifact/d3f:ServiceApplication/
aliases:
- Service
close_mappings:
- uco_master:OnlineService
is_a: Entity
slots:
- labels
- name
- tags
- uid
- version
slot_usage:
  labels:
    name: labels
    description: The list of labels associated with the service.
  name:
    name: name
    description: The name of the service.
  tags:
    name: tags
    description: The list of tags; <code>{key:value}</code> pairs associated to the
      service.
  uid:
    name: uid
    description: The unique identifier of the service.
  version:
    name: version
    description: The version of the service.
    recommended: true

Induced

name: Service
description: 'The Service object describes characteristics of a service, <code> e.g.
  AWS EC2.

  </code>'
notes:
- 'D3FEND™ Ontology d3f:ServiceApplication. —

  https://d3fend.mitre.org/dao/artifact/d3f:ServiceApplication/'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
see_also:
- https://d3fend.mitre.org/dao/artifact/d3f:ServiceApplication/
aliases:
- Service
close_mappings:
- uco_master:OnlineService
is_a: Entity
slot_usage:
  labels:
    name: labels
    description: The list of labels associated with the service.
  name:
    name: name
    description: The name of the service.
  tags:
    name: tags
    description: The list of tags; <code>{key:value}</code> pairs associated to the
      service.
  uid:
    name: uid
    description: The unique identifier of the service.
  version:
    name: version
    description: The version of the service.
    recommended: true
attributes:
  labels:
    name: labels
    description: The list of labels associated with the service.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Labels
    rank: 1000
    alias: labels
    owner: Service
    domain_of:
    - Osint
    - Resource
    - Account
    - ApplicationObject
    - Container
    - Image
    - LdapPerson
    - Metadata
    - Service
    range: string
    multivalued: true
  name:
    name: name
    description: The name of the service.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Name
    rank: 1000
    alias: name
    owner: Service
    domain_of:
    - AnalysisTarget
    - Observable
    - Os
    - Osint
    - Package
    - Parameter
    - PrivilegeInfo
    - San
    - Scim
    - Script
    - ServicePrivilegeAnalysis
    - SoftwareComponent
    - Sso
    - StartupItem
    - ThreatActor
    - Token
    - Entity
    - Resource
    - Account
    - Agent
    - AiModel
    - Aircraft
    - Analytic
    - ApplicationObject
    - Assessment
    - AutonomousSystem
    - Campaign
    - Check
    - CisBenchmark
    - CisBenchmarkResult
    - CisControl
    - ClassifierDetails
    - Container
    - D3fTactic
    - D3fTechnique
    - Database
    - Databucket
    - DomainContact
    - Edge
    - Endpoint
    - Enrichment
    - EnvironmentVariable
    - Evidences
    - Extension
    - Feature
    - File
    - Graph
    - Group
    - HttpCookie
    - HttpHeader
    - Idp
    - Image
    - Job
    - Kernel
    - KeyValueObject
    - LoadBalancer
    - Logger
    - Malware
    - ManagedEntity
    - MessageContext
    - Metric
    - Mitigation
    - NetworkInterface
    - Node
    - Organization
    - PeripheralDevice
    - Policy
    - ProcessEntity
    - Product
    - QueryInfo
    - Reporter
    - ResourceDetails
    - Rule
    - Scan
    - Service
    - SubTechnique
    - Table
    - Tactic
    - Technique
    - Trait
    - TransformationInfo
    - UnmannedAerialSystem
    - User
    - WebResource
    - Device
    - FtpActivity
    - RegValue
    - WinResource
    - WinService
    - PrefetchQuery
    range: string
    recommended: true
  tags:
    name: tags
    description: The list of tags; <code>{key:value}</code> pairs associated to the
      service.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Tags
    rank: 1000
    alias: tags
    owner: Service
    domain_of:
    - RelatedEvent
    - Resource
    - Account
    - ApplicationObject
    - Container
    - File
    - FindingInfo
    - Image
    - LdapPerson
    - Metadata
    - Service
    range: KeyValueObject
    multivalued: true
  uid:
    name: uid
    description: The unique identifier of the service.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Unique ID
    rank: 1000
    alias: uid
    owner: Service
    domain_of:
    - Osint
    - Package
    - ProgrammaticCredential
    - RelatedEvent
    - Request
    - Sbom
    - Scim
    - Script
    - Session
    - Span
    - Sso
    - Ticket
    - Token
    - Trace
    - Entity
    - Resource
    - Account
    - Advisory
    - Agent
    - AiModel
    - Aircraft
    - Analytic
    - ApplicationObject
    - Assessment
    - Certificate
    - Check
    - ClassifierDetails
    - Container
    - Cve
    - Cwe
    - D3fTactic
    - D3fTechnique
    - DataClassification
    - Database
    - Databucket
    - DomainContact
    - Edge
    - Email
    - Endpoint
    - Evidences
    - Extension
    - Feature
    - File
    - FindingObject
    - FindingInfo
    - Graph
    - Group
    - HttpRequest
    - Idp
    - Image
    - KbArticle
    - LoadBalancer
    - Logger
    - Malware
    - ManagedEntity
    - MessageContext
    - Metadata
    - Mitigation
    - NetworkConnectionInfo
    - NetworkEndpoint
    - NetworkInterface
    - Node
    - Organization
    - PeripheralDevice
    - Policy
    - ProcessEntity
    - Product
    - QueryInfo
    - Reporter
    - Rule
    - Scan
    - Service
    - SubTechnique
    - Table
    - Tactic
    - Technique
    - Trait
    - TransformationInfo
    - UnmannedAerialSystem
    - User
    - WebResource
    - Device
    - WinResource
    range: string
    recommended: true
  version:
    name: version
    description: The version of the service.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Version
    rank: 1000
    alias: version
    owner: Service
    domain_of:
    - Os
    - Package
    - RpcInterface
    - Sbom
    - Scim
    - SoftwareComponent
    - Tls
    - Agent
    - AiModel
    - Analytic
    - Api
    - ApplicationObject
    - Attack
    - Certificate
    - Check
    - CisControl
    - CisCsc
    - Cvss
    - D3fend
    - Databucket
    - Epss
    - Extension
    - Feature
    - File
    - HttpRequest
    - Logger
    - ManagedEntity
    - Metadata
    - Policy
    - Product
    - ResourceDetails
    - Rule
    - Service
    - NtpActivity
    range: string
    recommended: true