Slot: module

The module that pertains to the event.

URI: ocsf:module Alias: module

Applicable Classes

Name	Description	Modifies Slot
ModuleActivity	Module Activity events report when an endpoint process acts on a	yes
QueryEvidence	The specific resulting evidence information that was queried or discovered	yes
WindowsQueryEvidence	The resulting evidence information that was queried	no
ProcessActivity	Process Activity events report when a process launches, injects, opens or	yes
ModuleQuery	Module Query events report information about loaded modules	yes

Properties

Type and Range

Property	Value
Range	Module
Domain Of	QueryEvidence, ModuleQuery, ModuleActivity, ProcessActivity

Cardinality and Requirements

Property	Value

Aliases

Module

Identifier and Mapping Information

Schema Source

from schema: https://w3id.org/lmodel/ocsf

Mappings

Mapping Type	Mapped Value
self	ocsf:module
native	ocsf:module

LinkML Source

name: module
description: The module that pertains to the event.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Module
rank: 1000
alias: module
domain_of:
- QueryEvidence
- ModuleQuery
- ModuleActivity
- ProcessActivity
range: Module