Class: Trait

Describes a characteristic or feature of an entity that was observed. For

example, this object can be used to represent specific characteristics derived

from events or findings that can be surfaced as distinguishing traits of the

entity in question.

 classDiagram
    class Trait
    click Trait href "../Trait/"
      Entity <|-- Trait
        click Entity href "../Entity/"

      Trait : category

      Trait : name

      Trait : type

      Trait : uid

      Trait : values

Inheritance

OcsfObject
- Object
  - Entity
    - Trait

Slots

Name	Cardinality and Range	Description	Inheritance
category	0..1 String	The high-level grouping or classification this trait belongs to	direct
name	0..1 recommended String	The name of the trait	direct
type	0..1 String	The type of the trait	direct
uid	0..1 recommended String	The unique identifier of the trait	direct
values	* String	The values of the trait	direct

Usages

used by	used in	type	used
RelatedEvent	traits	range	Trait
FindingInfo	traits	range	Trait

In Subsets

objects_subset

Aliases

Trait

Identifier and Mapping Information

Schema Source

from schema: https://w3id.org/lmodel/ocsf

Mappings

Mapping Type	Mapped Value
self	ocsf:Trait
native	ocsf:Trait

LinkML Source

Direct

name: Trait
description: 'Describes a characteristic or feature of an entity that was observed.
  For

  example, this object can be used to represent specific characteristics derived

  from events or findings that can be surfaced as distinguishing traits of the

  entity in question.'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Trait
is_a: Entity
slots:
- category
- name
- type
- uid
- values
slot_usage:
  category:
    name: category
    description: The high-level grouping or classification this trait belongs to.
  name:
    name: name
    description: The name of the trait.
  type:
    name: type
    description: 'The type of the trait. For example, this can be used to indicate
      if the trait

      acts as a contributing factor (increases risk/severity) or a mitigating factor

      (decreases risk/severity), in the context of the related finding.'
  uid:
    name: uid
    description: The unique identifier of the trait.
  values:
    name: values
    description: The values of the trait.

Induced

name: Trait
description: 'Describes a characteristic or feature of an entity that was observed.
  For

  example, this object can be used to represent specific characteristics derived

  from events or findings that can be surfaced as distinguishing traits of the

  entity in question.'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Trait
is_a: Entity
slot_usage:
  category:
    name: category
    description: The high-level grouping or classification this trait belongs to.
  name:
    name: name
    description: The name of the trait.
  type:
    name: type
    description: 'The type of the trait. For example, this can be used to indicate
      if the trait

      acts as a contributing factor (increases risk/severity) or a mitigating factor

      (decreases risk/severity), in the context of the related finding.'
  uid:
    name: uid
    description: The unique identifier of the trait.
  values:
    name: values
    description: The values of the trait.
attributes:
  category:
    name: category
    description: The high-level grouping or classification this trait belongs to.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Category
    rank: 1000
    alias: category
    owner: Trait
    domain_of:
    - Osint
    - Vulnerability
    - Analytic
    - Assessment
    - Compliance
    - DataClassification
    - Rule
    - Trait
    range: string
  name:
    name: name
    description: The name of the trait.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Name
    rank: 1000
    alias: name
    owner: Trait
    domain_of:
    - AnalysisTarget
    - Observable
    - Os
    - Osint
    - Package
    - Parameter
    - PrivilegeInfo
    - San
    - Scim
    - Script
    - ServicePrivilegeAnalysis
    - SoftwareComponent
    - Sso
    - StartupItem
    - ThreatActor
    - Token
    - Entity
    - Resource
    - Account
    - Agent
    - AiModel
    - Aircraft
    - Analytic
    - ApplicationObject
    - Assessment
    - AutonomousSystem
    - Campaign
    - Check
    - CisBenchmark
    - CisBenchmarkResult
    - CisControl
    - ClassifierDetails
    - Container
    - D3fTactic
    - D3fTechnique
    - Database
    - Databucket
    - DomainContact
    - Edge
    - Endpoint
    - Enrichment
    - EnvironmentVariable
    - Evidences
    - Extension
    - Feature
    - File
    - Graph
    - Group
    - HttpCookie
    - HttpHeader
    - Idp
    - Image
    - Job
    - Kernel
    - KeyValueObject
    - LoadBalancer
    - Logger
    - Malware
    - ManagedEntity
    - MessageContext
    - Metric
    - Mitigation
    - NetworkInterface
    - Node
    - Organization
    - PeripheralDevice
    - Policy
    - ProcessEntity
    - Product
    - QueryInfo
    - Reporter
    - ResourceDetails
    - Rule
    - Scan
    - Service
    - SubTechnique
    - Table
    - Tactic
    - Technique
    - Trait
    - TransformationInfo
    - UnmannedAerialSystem
    - User
    - WebResource
    - Device
    - FtpActivity
    - RegValue
    - WinResource
    - WinService
    - PrefetchQuery
    range: string
    recommended: true
  type:
    name: type
    description: 'The type of the trait. For example, this can be used to indicate
      if the trait

      acts as a contributing factor (increases risk/severity) or a mitigating factor

      (decreases risk/severity), in the context of the related finding.'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Type
    rank: 1000
    alias: type
    owner: Trait
    domain_of:
    - AnalysisTarget
    - Observable
    - Os
    - Osint
    - Package
    - PrivilegeInfo
    - ProgrammaticCredential
    - RelatedEvent
    - San
    - Sbom
    - Script
    - SoftwareComponent
    - StartupItem
    - ThreatActor
    - Ticket
    - Timespan
    - TlsExtension
    - Token
    - Dns
    - Resource
    - Account
    - Agent
    - Analytic
    - ApplicationObject
    - AuthenticationToken
    - ClassifierDetails
    - Cve
    - Database
    - Databucket
    - DiscoveryDetails
    - DnsAnswer
    - DomainContact
    - EncryptionDetails
    - Endpoint
    - Enrichment
    - File
    - Graph
    - Group
    - Ja4Fingerprint
    - Kernel
    - ManagedEntity
    - Metadata
    - Module
    - NetworkEndpoint
    - NetworkInterface
    - Node
    - PeripheralDevice
    - Policy
    - Rule
    - Scan
    - Trait
    - UnmannedAerialSystem
    - UnmannedSystemOperatingArea
    - User
    - WebResource
    - Device
    - DatastoreActivity
    - FtpActivity
    - RegValue
    - WinResource
    range: string
  uid:
    name: uid
    description: The unique identifier of the trait.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Unique ID
    rank: 1000
    alias: uid
    owner: Trait
    domain_of:
    - Osint
    - Package
    - ProgrammaticCredential
    - RelatedEvent
    - Request
    - Sbom
    - Scim
    - Script
    - Session
    - Span
    - Sso
    - Ticket
    - Token
    - Trace
    - Entity
    - Resource
    - Account
    - Advisory
    - Agent
    - AiModel
    - Aircraft
    - Analytic
    - ApplicationObject
    - Assessment
    - Certificate
    - Check
    - ClassifierDetails
    - Container
    - Cve
    - Cwe
    - D3fTactic
    - D3fTechnique
    - DataClassification
    - Database
    - Databucket
    - DomainContact
    - Edge
    - Email
    - Endpoint
    - Evidences
    - Extension
    - Feature
    - File
    - FindingObject
    - FindingInfo
    - Graph
    - Group
    - HttpRequest
    - Idp
    - Image
    - KbArticle
    - LoadBalancer
    - Logger
    - Malware
    - ManagedEntity
    - MessageContext
    - Metadata
    - Mitigation
    - NetworkConnectionInfo
    - NetworkEndpoint
    - NetworkInterface
    - Node
    - Organization
    - PeripheralDevice
    - Policy
    - ProcessEntity
    - Product
    - QueryInfo
    - Reporter
    - Rule
    - Scan
    - Service
    - SubTechnique
    - Table
    - Tactic
    - Technique
    - Trait
    - TransformationInfo
    - UnmannedAerialSystem
    - User
    - WebResource
    - Device
    - WinResource
    range: string
    recommended: true
  values:
    name: values
    description: The values of the trait.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Values
    rank: 1000
    alias: values
    owner: Trait
    domain_of:
    - KeyValueObject
    - Trait
    range: string
    multivalued: true