Slot: cmd_line

The full command line used to launch an application, service, process, or job.

For example: ssh user@10.0.0.10. If the command line is

unavailable or missing, the empty string '' is to be used.

URI: ocsf:cmd_line Alias: cmd_line

Applicable Classes

Name	Description	Modifies Slot
LinuxProcess	Extends the process object to add Linux specific fields	no
ProcessEntity	The Process Entity object provides critical fields for referencing a process	yes
WindowsProcess	Extends the process object to add Windows specific fields	no
Process	The Process object describes a running instance of a launched program	no
WinService	The Windows Service object describes a Windows service	yes
Job	The Job object provides information about a scheduled job or task, including	yes
MacosProcess	Extends the process object to add macOS specific fields	no

Properties

Type and Range

Property	Value
Range	String
Domain Of	Job, ProcessEntity, WinService

Cardinality and Requirements

Property	Value

Aliases

Command Line

Identifier and Mapping Information

Annotations

property	value
observable_id	13

Schema Source

from schema: https://w3id.org/lmodel/ocsf

Mappings

Mapping Type	Mapped Value
self	ocsf:cmd_line
native	ocsf:cmd_line

LinkML Source

name: cmd_line
annotations:
  observable_id:
    tag: observable_id
    value: 13
description: 'The full command line used to launch an application, service, process,
  or job.

  For example: <code>ssh user@10.0.0.10</code>. If the command line is

  unavailable or missing, the empty string <code>''''</code> is to be used.'
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Command Line
rank: 1000
alias: cmd_line
domain_of:
- Job
- ProcessEntity
- WinService
range: string