Slot: network_interfaces
The physical or virtual network interfaces that are associated with the device,
one for each unique MAC address/IP address/hostname/name
combination. Note: The first element of the array is the network
information that pertains to the event.
URI: ocsf:network_interfaces Alias: network_interfaces
Applicable Classes
| Name | Description | Modifies Slot |
|---|---|---|
| WindowsQueryEvidence | The resulting evidence information that was queried | no |
| NetworksQuery | Networks Query events report information about network adapters | yes |
| QueryEvidence | The specific resulting evidence information that was queried or discovered | yes |
| Device | The Device object represents an addressable computer system or host, which is | no |
Properties
Type and Range
| Property | Value |
|---|---|
| Range | NetworkInterface |
| Domain Of | QueryEvidence, Device, NetworksQuery |
Cardinality and Requirements
| Property | Value |
|---|---|
| Multivalued | Yes |
Aliases
- Network Interfaces
Identifier and Mapping Information
Schema Source
- from schema: https://w3id.org/lmodel/ocsf
Mappings
| Mapping Type | Mapped Value |
|---|---|
| self | ocsf:network_interfaces |
| native | ocsf:network_interfaces |
LinkML Source
name: network_interfaces
description: 'The physical or virtual network interfaces that are associated with
the device,
one for each unique MAC address/IP address/hostname/name
combination.<p><b>Note:</b> The first element of the array is the network
information that pertains to the event.</p>'
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Network Interfaces
rank: 1000
alias: network_interfaces
domain_of:
- QueryEvidence
- Device
- NetworksQuery
range: NetworkInterface
multivalued: true