Skip to content

Slot: lineage

The lineage of the process, represented by a list of paths for each ancestor

process. For example: ['/usr/sbin/sshd', '/usr/bin/bash',

'/usr/bin/whoami'].

URI: ocsf:lineage Alias: lineage

Applicable Classes

Name Description Modifies Slot
LinuxProcess Extends the process object to add Linux specific fields no
WindowsProcess Extends the process object to add Windows specific fields no
Process The Process object describes a running instance of a launched program yes
MacosProcess Extends the process object to add macOS specific fields no

Properties

Type and Range

Property Value
Range FilePathT
Domain Of Process

Cardinality and Requirements

Property Value
Multivalued Yes

Aliases

  • Lineage

Identifier and Mapping Information

Schema Source

Mappings

Mapping Type Mapped Value
self ocsf:lineage
native ocsf:lineage

LinkML Source

name: lineage
description: 'The lineage of the process, represented by a list of paths for each
  ancestor

  process. For example: <code>[''/usr/sbin/sshd'', ''/usr/bin/bash'',

  ''/usr/bin/whoami'']</code>.'
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Lineage
rank: 1000
alias: lineage
domain_of:
- Process
range: FilePathT
multivalued: true