Enum: SshActivityActivityIdEnum
SshActivity activity_id values.
URI: ocsf:SshActivityActivityIdEnum
Permissible Values
| Value | Meaning | Description |
|---|---|---|
| OPEN | None | A new network connection was opened |
| CLOSE | None | The network connection was closed |
| RESET | None | The network connection was abnormally terminated or closed by a middle device |
| FAIL | None | The network connection failed |
| REFUSE | None | The network connection was refused |
| TRAFFIC | None | Network traffic report |
| LISTEN | None | A network endpoint began listening for new network connections |
| UNKNOWN | None | The event activity is unknown |
| OTHER | None | The event activity is not mapped |
Slots
| Name | Description |
|---|---|
| activity_id |
Identifier and Mapping Information
Schema Source
- from schema: https://w3id.org/lmodel/ocsf
LinkML Source
name: SshActivityActivityIdEnum
description: SshActivity activity_id values.
from_schema: https://w3id.org/lmodel/ocsf
rank: 1000
permissible_values:
OPEN:
text: OPEN
description: A new network connection was opened.
annotations:
ocsf_uid:
tag: ocsf_uid
value: '1'
caption:
tag: caption
value: Open
CLOSE:
text: CLOSE
description: The network connection was closed.
annotations:
ocsf_uid:
tag: ocsf_uid
value: '2'
caption:
tag: caption
value: Close
RESET:
text: RESET
description: 'The network connection was abnormally terminated or closed by a
middle device
like firewalls.'
annotations:
ocsf_uid:
tag: ocsf_uid
value: '3'
caption:
tag: caption
value: Reset
FAIL:
text: FAIL
description: 'The network connection failed. For example a connection timeout
or no route to
host.'
annotations:
ocsf_uid:
tag: ocsf_uid
value: '4'
caption:
tag: caption
value: Fail
REFUSE:
text: REFUSE
description: 'The network connection was refused. For example an attempt to connect
to a
server port which is not open.'
annotations:
ocsf_uid:
tag: ocsf_uid
value: '5'
caption:
tag: caption
value: Refuse
TRAFFIC:
text: TRAFFIC
description: Network traffic report.
annotations:
ocsf_uid:
tag: ocsf_uid
value: '6'
caption:
tag: caption
value: Traffic
LISTEN:
text: LISTEN
description: A network endpoint began listening for new network connections.
annotations:
ocsf_uid:
tag: ocsf_uid
value: '7'
caption:
tag: caption
value: Listen
UNKNOWN:
text: UNKNOWN
description: The event activity is unknown.
annotations:
ocsf_uid:
tag: ocsf_uid
value: '0'
caption:
tag: caption
value: Unknown
OTHER:
text: OTHER
description: 'The event activity is not mapped. See the <code>activity_name</code>
attribute,
which contains a data source specific value.'
annotations:
ocsf_uid:
tag: ocsf_uid
value: '99'
caption:
tag: caption
value: Other