Skip to content

Enum: SmbActivityActivityIdEnum

SmbActivity activity_id values.

URI: ocsf:SmbActivityActivityIdEnum

Permissible Values

Value Meaning Description
FILE_SUPERSEDE None The event pertains to file superseded activity (overwritten if it exists and
FILE_OPEN None The event pertains to file open activity (the file is opened if it exists and
FILE_CREATE None The event pertains to file creation activity (a file is created if it does no...
FILE_OPEN_IF None The event pertains to file open activity (the file is opened if it exists and
FILE_OVERWRITE None The event pertains to file overwrite activity (the file is opened in a
FILE_OVERWRITE_IF None The event pertains to file overwrite activity (the file is opened in a
UNKNOWN None The event activity is unknown
OTHER None The event activity is not mapped

Slots

Name Description
activity_id

Identifier and Mapping Information

Schema Source

LinkML Source

name: SmbActivityActivityIdEnum
description: SmbActivity activity_id values.
from_schema: https://w3id.org/lmodel/ocsf
rank: 1000
permissible_values:
  FILE_SUPERSEDE:
    text: FILE_SUPERSEDE
    description: 'The event pertains to file superseded activity (overwritten if it
      exists and

      created if not).'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '1'
      caption:
        tag: caption
        value: File Supersede
  FILE_OPEN:
    text: FILE_OPEN
    description: 'The event pertains to file open activity (the file is opened if
      it exists and

      fails to open if it doesn''t).'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '2'
      caption:
        tag: caption
        value: File Open
  FILE_CREATE:
    text: FILE_CREATE
    description: 'The event pertains to file creation activity (a file is created
      if it does not

      exist and fails if it does).'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '3'
      caption:
        tag: caption
        value: File Create
  FILE_OPEN_IF:
    text: FILE_OPEN_IF
    description: 'The event pertains to file open activity (the file is opened if
      it exists and

      is created if it doesn''t).'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '4'
      caption:
        tag: caption
        value: File Open If
  FILE_OVERWRITE:
    text: FILE_OVERWRITE
    description: 'The event pertains to file overwrite activity (the file is opened
      in a

      truncated form if it exists and fails if it doesn''t).'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '5'
      caption:
        tag: caption
        value: File Overwrite
  FILE_OVERWRITE_IF:
    text: FILE_OVERWRITE_IF
    description: 'The event pertains to file overwrite activity (the file is opened
      in a

      truncated form if it exists and created otherwise)'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '6'
      caption:
        tag: caption
        value: File Overwrite If
  UNKNOWN:
    text: UNKNOWN
    description: The event activity is unknown.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '0'
      caption:
        tag: caption
        value: Unknown
  OTHER:
    text: OTHER
    description: 'The event activity is not mapped. See the <code>activity_name</code>
      attribute,

      which contains a data source specific value.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '99'
      caption:
        tag: caption
        value: Other