Slot: pid
The process identifier, as reported by the operating system. Process ID (PID)
is a number used by the operating system to uniquely identify an active
process.
URI: ocsf:pid
Alias: pid
Applicable Classes
| Name |
Description |
Modifies Slot |
| LinuxProcess |
Extends the process object to add Linux specific fields |
no |
| ProcessEntity |
The Process Entity object provides critical fields for referencing a process |
yes |
| WindowsProcess |
Extends the process object to add Windows specific fields |
no |
| Process |
The Process object describes a running instance of a launched program |
no |
| MacosProcess |
Extends the process object to add macOS specific fields |
no |
Properties
Type and Range
Cardinality and Requirements
Aliases
Annotations
| property |
value |
| observable_id |
15 |
Schema Source
Mappings
| Mapping Type |
Mapped Value |
| self |
ocsf:pid |
| native |
ocsf:pid |
LinkML Source
name: pid
annotations:
observable_id:
tag: observable_id
value: 15
description: 'The process identifier, as reported by the operating system. Process
ID (PID)
is a number used by the operating system to uniquely identify an active
process.'
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Process ID
rank: 1000
alias: pid
domain_of:
- ProcessEntity
range: integer