Skip to content

Slot: created_time

The time when the object was created. See specific usage.

URI: ocsf:created_time Alias: created_time

Applicable Classes

Name Description Modifies Slot
ProcessEntity The Process Entity object provides critical fields for referencing a process yes
Databucket The databucket object is a basic container that holds data, typically organiz... yes
WebResource The Web Resource object describes characteristics of a web resource that was no
Whois The resources of a WHOIS record for a given domain yes
FindingObject The Finding object describes metadata related to a security finding generated yes
LdapPerson The additional LDAP attributes that describe a person yes
DigitalSignature The Digital Signature object contains information about the cryptographic yes
Table The table object represents a table within a structured relational database o... yes
FindingInfo The Finding Information object describes metadata related to a security findi... yes
File The File object represents the metadata associated with a file stored in a yes
Database The database object is used for databases which are typically datastore yes
Osint The OSINT (Open Source Intelligence) object contains details related to an yes
WindowsProcess Extends the process object to add Windows specific fields no
Scim The System for Cross-domain Identity Management (SCIM) Configuration object yes
Session The Session object describes details about an authenticated session yes
Process The Process object describes a running instance of a launched program no
LinuxProcess Extends the process object to add Linux specific fields no
ResourceDetails The Resource Details object describes details about resources that were no
KbArticle The KB Article object contains metadata that describes the patch or update yes
Sbom The Software Bill of Materials object describes characteristics of a generate... yes
Certificate The Digital Certificate, also known as a Public Key Certificate, object yes
Resource The Resource object contains attributes that provide information about a yes
Advisory The Advisory object represents publicly disclosed cybersecurity vulnerabiliti... yes
Job The Job object provides information about a scheduled job or task, including yes
MacosProcess Extends the process object to add macOS specific fields no
Cve The Common Vulnerabilities and Exposures (CVE) object represents publicly yes
Device The Device object represents an addressable computer system or host, which is yes
WinResource The Windows resource object describes a resource object managed by Windows, no
Enrichment The Enrichment object provides inline enrichment data for specific attributes yes
Epss The Exploit Prediction Scoring System (EPSS) object describes the estimated yes
AuthenticationToken The Authentication Token object extends the base token object an... yes
Sso The Single Sign-On (SSO) object provides a structure for normalizing SSO yes
Token The Token object is the base object for representing tokens, API keys, and yes
RelatedEvent The Related Event object describes an event or another finding related to a yes

Properties

Type and Range

Property Value
Range TimestampT
Domain Of Osint, RelatedEvent, Sbom, Scim, Session, Sso, Token, Whois, Resource, Advisory, AuthenticationToken, Certificate, Cve, Database, Databucket, DigitalSignature, Enrichment, Epss, File, FindingObject, FindingInfo, Job, KbArticle, LdapPerson, ProcessEntity, Table, Device

Cardinality and Requirements

Property Value

Aliases

  • Created Time

Identifier and Mapping Information

Schema Source

Mappings

Mapping Type Mapped Value
self ocsf:created_time
native ocsf:created_time

LinkML Source

name: created_time
description: The time when the object was created. See specific usage.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Created Time
rank: 1000
alias: created_time
domain_of:
- Osint
- RelatedEvent
- Sbom
- Scim
- Session
- Sso
- Token
- Whois
- Resource
- Advisory
- AuthenticationToken
- Certificate
- Cve
- Database
- Databucket
- DigitalSignature
- Enrichment
- Epss
- File
- FindingObject
- FindingInfo
- Job
- KbArticle
- LdapPerson
- ProcessEntity
- Table
- Device
range: TimestampT