Slot: last_seen_time

The most recent detection time of the activity or object. See specific usage.

URI: ocsf:last_seen_time Alias: last_seen_time

Applicable Classes

Name	Description	Modifies Slot
FindingInfo	The Finding Information object describes metadata related to a security findi...	yes
Vulnerability	The vulnerability is an unintended characteristic of a computing component or	yes
IdentityActivityMetrics	The Identity Activity Metrics object captures usage patterns, authentication	yes
Device	The Device object represents an addressable computer system or host, which is	yes
Whois	The resources of a WHOIS record for a given domain	yes
FindingObject	The Finding object describes metadata related to a security finding generated	yes
RelatedEvent	The Related Event object describes an event or another finding related to a	yes

Properties

Type and Range

Property	Value
Range	TimestampT
Domain Of	RelatedEvent, Vulnerability, Whois, FindingObject, FindingInfo, IdentityActivityMetrics, Device

Cardinality and Requirements

Property	Value

Aliases

• Last Seen

Identifier and Mapping Information

Schema Source

• from schema: https://w3id.org/lmodel/ocsf

Mappings

Mapping Type	Mapped Value
self	ocsf:last_seen_time
native	ocsf:last_seen_time

LinkML Source

name: last_seen_time
description: The most recent detection time of the activity or object. See specific
  usage.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Last Seen
rank: 1000
alias: last_seen_time
domain_of:
- RelatedEvent
- Vulnerability
- Whois
- FindingObject
- FindingInfo
- IdentityActivityMetrics
- Device
range: TimestampT