Slot: app_name
The name of the application associated with the event or object.
URI: ocsf:app_name
Alias: app_name
Applicable Classes
| Name |
Description |
Modifies Slot |
| HttpActivity |
HTTP Activity events report HTTP connection and traffic information |
no |
| NtpActivity |
The Network Time Protocol (NTP) Activity events report instances of remote |
no |
| NetworkFileActivity |
Network File Activity events report file activities traversing the network, |
no |
| DnsActivity |
DNS Activity events report DNS queries and answers as seen on the network |
no |
| SmbActivity |
Server Message Block (SMB) Protocol Activity events report client/server |
no |
| SshActivity |
SSH Activity events report remote client connections to a server using the |
no |
| RdpActivity |
Remote Desktop Protocol (RDP) Activity events report post-authentication remo... |
no |
| Actor |
The Actor object contains details about the user, role, application, service, |
yes |
| NetworkEvent |
Network event is a generic event that defines a set of attributes available i... |
yes |
| TunnelActivity |
Tunnel Activity events report secure tunnel establishment (such as VPN), |
no |
| FtpActivity |
File Transfer Protocol (FTP) Activity events report file transfers between a |
no |
| NetworkActivity |
Network Activity events report network connection and traffic activity |
no |
| DhcpActivity |
DHCP Activity events report MAC to IP assignment via DHCP from a client or |
no |
Properties
Type and Range
Cardinality and Requirements
Aliases
Schema Source
Mappings
| Mapping Type |
Mapped Value |
| self |
ocsf:app_name |
| native |
ocsf:app_name |
LinkML Source
name: app_name
description: The name of the application associated with the event or object.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Application Name
rank: 1000
alias: app_name
domain_of:
- Actor
- NetworkEvent
range: string