Skip to content

Slot: deleted_time

The timestamp when the user was deleted. In Active Directory (AD), when a user

is deleted they are moved to a temporary container and then removed after 30

days. So, this field can be populated even after a user is deleted for the next

30 days.

URI: ocsf:deleted_time Alias: deleted_time

Applicable Classes

Name Description Modifies Slot
LdapPerson The additional LDAP attributes that describe a person no

Properties

Type and Range

Property Value
Range TimestampT
Domain Of LdapPerson

Cardinality and Requirements

Property Value

Aliases

  • Deleted Time

Identifier and Mapping Information

Schema Source

Mappings

Mapping Type Mapped Value
self ocsf:deleted_time
native ocsf:deleted_time

LinkML Source

name: deleted_time
description: 'The timestamp when the user was deleted. In Active Directory (AD), when
  a user

  is deleted they are moved to a temporary container and then removed after 30

  days. So, this field can be populated even after a user is deleted for the next

  30 days.'
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Deleted Time
rank: 1000
alias: deleted_time
domain_of:
- LdapPerson
range: TimestampT