Skip to content

Enum: WinResourceTypeIdEnum

The normalized type identifier of the Windows resource object accessed.

URI: ocsf:WinResourceTypeIdEnum

Permissible Values

Value Meaning Description
UNKNOWN None The resource object type is unknown
DIRECTORY None Directory
EVENT None Event
TIMER None Timer
DEVICE None Device
MUTANT None Mutant
TYPE None Type
FILE None File
TOKEN None Token
THREAD None Thread
SECTION None Section
WINDOWSTATION None WindowStation
DEBUGOBJECT None DebugObject
FILTERCOMMUNICATIONPORT None FilterCommunicationPort
EVENTPAIR None EventPair
DRIVER None Driver
IOCOMPLETION None IoCompletion
CONTROLLER None Controller
SYMBOLICLINK None SymbolicLink
WMIGUID None WmiGuid
PROCESS None Process
PROFILE None Profile
DESKTOP None Desktop
KEYEDEVENT None KeyedEvent
ADAPTER None Adapter
KEY None Key
WAITABLEPORT None WaitablePort
CALLBACK None Callback
SEMAPHORE None Semaphore
JOB None Job
PORT None Port
FILTERCONNECTIONPORT None FilterConnectionPort
ALPC_PORT None ALPC Port
SAM_ALIAS None SAM_ALIAS
SAM_GROUP None SAM_GROUP
SAM_USER None SAM_USER
SAM_DOMAIN None SAM_DOMAIN
SAM_SERVER None SAM_SERVER
ATOM None Atom
WFP_FILTER None WFP Filter
WFP_CALLOUT None WFP Callout
WFP_LAYER None WFP Layer
WFP_SUB_LAYER None WFP Sub-layer
WFP_PROVIDER None WFP Provider
WFP_PROVIDER_CONTEXT None WFP Provider Context
OTHER None The resource object type is not mapped

Slots

Name Description
type_id The normalized type identifier of the Windows resource object accessed

Identifier and Mapping Information

Schema Source

LinkML Source

name: WinResourceTypeIdEnum
description: The normalized type identifier of the Windows resource object accessed.
from_schema: https://w3id.org/lmodel/ocsf
rank: 1000
permissible_values:
  UNKNOWN:
    text: UNKNOWN
    description: The resource object type is unknown.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '0'
      caption:
        tag: caption
        value: Unknown
  DIRECTORY:
    text: DIRECTORY
    description: Directory
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '1'
      caption:
        tag: caption
        value: Directory
  EVENT:
    text: EVENT
    description: Event
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '2'
      caption:
        tag: caption
        value: Event
  TIMER:
    text: TIMER
    description: Timer
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '3'
      caption:
        tag: caption
        value: Timer
  DEVICE:
    text: DEVICE
    description: Device
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '4'
      caption:
        tag: caption
        value: Device
  MUTANT:
    text: MUTANT
    description: Mutant
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '5'
      caption:
        tag: caption
        value: Mutant
  TYPE:
    text: TYPE
    description: Type
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '6'
      caption:
        tag: caption
        value: Type
  FILE:
    text: FILE
    description: File
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '7'
      caption:
        tag: caption
        value: File
  TOKEN:
    text: TOKEN
    description: Token
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '8'
      caption:
        tag: caption
        value: Token
  THREAD:
    text: THREAD
    description: Thread
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '9'
      caption:
        tag: caption
        value: Thread
  SECTION:
    text: SECTION
    description: Section
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '10'
      caption:
        tag: caption
        value: Section
  WINDOWSTATION:
    text: WINDOWSTATION
    description: WindowStation
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '11'
      caption:
        tag: caption
        value: WindowStation
  DEBUGOBJECT:
    text: DEBUGOBJECT
    description: DebugObject
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '12'
      caption:
        tag: caption
        value: DebugObject
  FILTERCOMMUNICATIONPORT:
    text: FILTERCOMMUNICATIONPORT
    description: FilterCommunicationPort
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '13'
      caption:
        tag: caption
        value: FilterCommunicationPort
  EVENTPAIR:
    text: EVENTPAIR
    description: EventPair
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '14'
      caption:
        tag: caption
        value: EventPair
  DRIVER:
    text: DRIVER
    description: Driver
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '15'
      caption:
        tag: caption
        value: Driver
  IOCOMPLETION:
    text: IOCOMPLETION
    description: IoCompletion
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '16'
      caption:
        tag: caption
        value: IoCompletion
  CONTROLLER:
    text: CONTROLLER
    description: Controller
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '17'
      caption:
        tag: caption
        value: Controller
  SYMBOLICLINK:
    text: SYMBOLICLINK
    description: SymbolicLink
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '18'
      caption:
        tag: caption
        value: SymbolicLink
  WMIGUID:
    text: WMIGUID
    description: WmiGuid
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '19'
      caption:
        tag: caption
        value: WmiGuid
  PROCESS:
    text: PROCESS
    description: Process
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '20'
      caption:
        tag: caption
        value: Process
  PROFILE:
    text: PROFILE
    description: Profile
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '21'
      caption:
        tag: caption
        value: Profile
  DESKTOP:
    text: DESKTOP
    description: Desktop
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '22'
      caption:
        tag: caption
        value: Desktop
  KEYEDEVENT:
    text: KEYEDEVENT
    description: KeyedEvent
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '23'
      caption:
        tag: caption
        value: KeyedEvent
  ADAPTER:
    text: ADAPTER
    description: Adapter
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '24'
      caption:
        tag: caption
        value: Adapter
  KEY:
    text: KEY
    description: Key
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '25'
      caption:
        tag: caption
        value: Key
  WAITABLEPORT:
    text: WAITABLEPORT
    description: WaitablePort
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '26'
      caption:
        tag: caption
        value: WaitablePort
  CALLBACK:
    text: CALLBACK
    description: Callback
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '27'
      caption:
        tag: caption
        value: Callback
  SEMAPHORE:
    text: SEMAPHORE
    description: Semaphore
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '28'
      caption:
        tag: caption
        value: Semaphore
  JOB:
    text: JOB
    description: Job
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '29'
      caption:
        tag: caption
        value: Job
  PORT:
    text: PORT
    description: Port
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '30'
      caption:
        tag: caption
        value: Port
  FILTERCONNECTIONPORT:
    text: FILTERCONNECTIONPORT
    description: FilterConnectionPort
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '31'
      caption:
        tag: caption
        value: FilterConnectionPort
  ALPC_PORT:
    text: ALPC_PORT
    description: ALPC Port
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '32'
      caption:
        tag: caption
        value: ALPC Port
  SAM_ALIAS:
    text: SAM_ALIAS
    description: SAM_ALIAS
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '33'
      caption:
        tag: caption
        value: SAM_ALIAS
  SAM_GROUP:
    text: SAM_GROUP
    description: SAM_GROUP
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '34'
      caption:
        tag: caption
        value: SAM_GROUP
  SAM_USER:
    text: SAM_USER
    description: SAM_USER
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '35'
      caption:
        tag: caption
        value: SAM_USER
  SAM_DOMAIN:
    text: SAM_DOMAIN
    description: SAM_DOMAIN
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '36'
      caption:
        tag: caption
        value: SAM_DOMAIN
  SAM_SERVER:
    text: SAM_SERVER
    description: SAM_SERVER
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '37'
      caption:
        tag: caption
        value: SAM_SERVER
  ATOM:
    text: ATOM
    description: Atom
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '38'
      caption:
        tag: caption
        value: Atom
  WFP_FILTER:
    text: WFP_FILTER
    description: WFP Filter
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '39'
      caption:
        tag: caption
        value: WFP Filter
  WFP_CALLOUT:
    text: WFP_CALLOUT
    description: WFP Callout
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '40'
      caption:
        tag: caption
        value: WFP Callout
  WFP_LAYER:
    text: WFP_LAYER
    description: WFP Layer
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '41'
      caption:
        tag: caption
        value: WFP Layer
  WFP_SUB_LAYER:
    text: WFP_SUB_LAYER
    description: WFP Sub-layer
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '42'
      caption:
        tag: caption
        value: WFP Sub-layer
  WFP_PROVIDER:
    text: WFP_PROVIDER
    description: WFP Provider
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '43'
      caption:
        tag: caption
        value: WFP Provider
  WFP_PROVIDER_CONTEXT:
    text: WFP_PROVIDER_CONTEXT
    description: WFP Provider Context
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '44'
      caption:
        tag: caption
        value: WFP Provider Context
  OTHER:
    text: OTHER
    description: 'The resource object type is not mapped. See the <code>type</code>
      attribute,

      which may contain a data source specific value.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '99'
      caption:
        tag: caption
        value: Other