Skip to content

Slot: data

The additional data that is associated with the event or object. See specific

usage.

URI: ocsf:data Alias: data

Applicable Classes

Name Description Modifies Slot
Request The Request Elements object describes characteristics of an API request yes
Response The Response Elements object describes characteristics of an API response yes
Edge Represents a connection or relationship between two nodes in a graph yes
Node Represents a node or a vertex in a graph structure yes
Policy The Policy object describes the policies that are applicable yes
Evidences A collection of evidence artifacts associated to the activity/activities that yes
QueryInfo The query info object holds information related to data access within a yes
ResourceDetails The Resource Details object describes details about resources that were no
WinResource The Windows resource object describes a resource object managed by Windows, no
Enrichment The Enrichment object provides inline enrichment data for specific attributes yes
WindowsEvidences Extends the evidences object to add Windows specific fields no
WebResource The Web Resource object describes characteristics of a web resource that was yes
Databucket The databucket object is a basic container that holds data, typically organiz... no
Resource The Resource object contains attributes that provide information about a yes
RegValue The registry value object describes a Windows registry value yes
TlsExtension The TLS Extension object describes additional attributes that extend the base yes
ApplicationObject An Application describes the details for an inventoried application as report... yes
ManagedEntity The Managed Entity object describes the type and version of an entity, such a... yes

Properties

Type and Range

Property Value
Range String
Domain Of Request, Response, TlsExtension, Resource, ApplicationObject, Edge, Enrichment, Evidences, ManagedEntity, Node, Policy, QueryInfo, WebResource, RegValue

Cardinality and Requirements

Property Value

Aliases

  • Data

Identifier and Mapping Information

Schema Source

Mappings

Mapping Type Mapped Value
self ocsf:data
native ocsf:data

LinkML Source

name: data
description: 'The additional data that is associated with the event or object. See
  specific

  usage.'
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Data
rank: 1000
alias: data
domain_of:
- Request
- Response
- TlsExtension
- Resource
- ApplicationObject
- Edge
- Enrichment
- Evidences
- ManagedEntity
- Node
- Policy
- QueryInfo
- WebResource
- RegValue
range: string