Slot: first_seen_time

The initial detection time of the activity or object. See specific usage

URI: ocsf:first_seen_time Alias: first_seen_time

Applicable Classes

Name	Description	Modifies Slot
FindingInfo	The Finding Information object describes metadata related to a security findi...	yes
Vulnerability	The vulnerability is an unintended characteristic of a computing component or	yes
IdentityActivityMetrics	The Identity Activity Metrics object captures usage patterns, authentication	yes
Device	The Device object represents an addressable computer system or host, which is	yes
FindingObject	The Finding object describes metadata related to a security finding generated	yes
RelatedEvent	The Related Event object describes an event or another finding related to a	yes

Properties

Type and Range

Property	Value
Range	TimestampT
Domain Of	RelatedEvent, Vulnerability, FindingObject, FindingInfo, IdentityActivityMetrics, Device

Cardinality and Requirements

Property	Value

Aliases

• First Seen

Identifier and Mapping Information

Schema Source

• from schema: https://w3id.org/lmodel/ocsf

Mappings

Mapping Type	Mapped Value
self	ocsf:first_seen_time
native	ocsf:first_seen_time

LinkML Source

name: first_seen_time
description: The initial detection time of the activity or object. See specific usage
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- First Seen
rank: 1000
alias: first_seen_time
domain_of:
- RelatedEvent
- Vulnerability
- FindingObject
- FindingInfo
- IdentityActivityMetrics
- Device
range: TimestampT