Slot: ja4_fingerprint_list
A list of the JA4+ network fingerprints.
URI: ocsf:ja4_fingerprint_list
Alias: ja4_fingerprint_list
Applicable Classes
| Name |
Description |
Modifies Slot |
| HttpActivity |
HTTP Activity events report HTTP connection and traffic information |
no |
| NtpActivity |
The Network Time Protocol (NTP) Activity events report instances of remote |
no |
| Evidences |
A collection of evidence artifacts associated to the activity/activities that |
yes |
| NetworkFileActivity |
Network File Activity events report file activities traversing the network, |
no |
| DnsActivity |
DNS Activity events report DNS queries and answers as seen on the network |
no |
| SmbActivity |
Server Message Block (SMB) Protocol Activity events report client/server |
no |
| WindowsEvidences |
Extends the evidences object to add Windows specific fields |
no |
| SshActivity |
SSH Activity events report remote client connections to a server using the |
no |
| RdpActivity |
Remote Desktop Protocol (RDP) Activity events report post-authentication remo... |
no |
| NetworkEvent |
Network event is a generic event that defines a set of attributes available i... |
yes |
| TunnelActivity |
Tunnel Activity events report secure tunnel establishment (such as VPN), |
no |
| FtpActivity |
File Transfer Protocol (FTP) Activity events report file transfers between a |
no |
| NetworkActivity |
Network Activity events report network connection and traffic activity |
no |
| DhcpActivity |
DHCP Activity events report MAC to IP assignment via DHCP from a client or |
no |
Properties
Type and Range
Cardinality and Requirements
| Property |
Value |
| Multivalued |
Yes |
Aliases
Schema Source
Mappings
| Mapping Type |
Mapped Value |
| self |
ocsf:ja4_fingerprint_list |
| native |
ocsf:ja4_fingerprint_list |
LinkML Source
name: ja4_fingerprint_list
description: A list of the JA4+ network fingerprints.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- JA4+ Fingerprints
rank: 1000
alias: ja4_fingerprint_list
domain_of:
- Evidences
- NetworkEvent
range: Ja4Fingerprint
multivalued: true