Skip to content

Enum: WindowsServiceCategoryIdEnum

The normalized identifier of the service category.

URI: ocsf:WindowsServiceCategoryIdEnum

Permissible Values

Value Meaning Description
UNKNOWN None The service category is unknown
KERNEL_MODE None A kernel mode driver
USER_MODE None A user mode service
OTHER None The service category is not mapped

Slots

Name Description
service_category_id The normalized identifier of the service category

Identifier and Mapping Information

Schema Source

LinkML Source

name: WindowsServiceCategoryIdEnum
description: The normalized identifier of the service category.
from_schema: https://w3id.org/lmodel/ocsf
rank: 1000
permissible_values:
  UNKNOWN:
    text: UNKNOWN
    description: The service category is unknown.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '0'
      caption:
        tag: caption
        value: Unknown
  KERNEL_MODE:
    text: KERNEL_MODE
    description: A kernel mode driver.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '1'
      caption:
        tag: caption
        value: Kernel Mode
  USER_MODE:
    text: USER_MODE
    description: A user mode service.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '2'
      caption:
        tag: caption
        value: User Mode
  OTHER:
    text: OTHER
    description: 'The service category is not mapped. See the <code>service_category</code>

      attribute, which contains an event source specific value.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '99'
      caption:
        tag: caption
        value: Other