Slot: group
The group object associated with an entity such as user, policy, or rule.
URI: ocsf:group
Alias: group
Applicable Classes
| Name |
Description |
Modifies Slot |
| LinuxProcess |
Extends the process object to add Linux specific fields |
no |
| ResourceDetails |
The Resource Details object describes details about resources that were |
yes |
| QueryEvidence |
The specific resulting evidence information that was queried or discovered |
yes |
| Policy |
The Policy object describes the policies that are applicable |
yes |
| WindowsQueryEvidence |
The resulting evidence information that was queried |
no |
| Databucket |
The databucket object is a basic container that holds data, typically organiz... |
yes |
| Api |
The API, or Application Programming Interface, object represents information |
yes |
| AuthorizeSession |
Authorize Session events report privileges or groups assigned to a new user |
yes |
| GroupManagement |
Group Management events report management updates to a group, including updat... |
yes |
| LinuxUsersProfile |
The attributes that Linux uses to identify user information |
yes |
| ApplicationObject |
An Application describes the details for an inventoried application as report... |
yes |
| AdminGroupQuery |
Admin Group Query events report information about administrative groups |
yes |
| ManagedEntity |
The Managed Entity object describes the type and version of an entity, such a... |
yes |
Properties
Type and Range
| Property |
Value |
| Range |
Group |
| Domain Of |
QueryEvidence, Api, ApplicationObject, Databucket, ManagedEntity, Policy, ResourceDetails, AdminGroupQuery, AuthorizeSession, GroupManagement, LinuxUsersProfile |
Cardinality and Requirements
Aliases
Schema Source
Mappings
| Mapping Type |
Mapped Value |
| self |
ocsf:group |
| native |
ocsf:group |
LinkML Source
name: group
description: The group object associated with an entity such as user, policy, or rule.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Group
rank: 1000
alias: group
domain_of:
- QueryEvidence
- Api
- ApplicationObject
- Databucket
- ManagedEntity
- Policy
- ResourceDetails
- AdminGroupQuery
- AuthorizeSession
- GroupManagement
- LinuxUsersProfile
range: Group