Skip to content

Slot: pid

The process identifier, as reported by the operating system. Process ID (PID)

is a number used by the operating system to uniquely identify an active

process.

URI: ocsf:pid Alias: pid

Applicable Classes

Name Description Modifies Slot
LinuxProcess Extends the process object to add Linux specific fields no
ProcessEntity The Process Entity object provides critical fields for referencing a process yes
WindowsProcess Extends the process object to add Windows specific fields no
Process The Process object describes a running instance of a launched program no
MacosProcess Extends the process object to add macOS specific fields no

Properties

Type and Range

Property Value
Range Integer
Domain Of ProcessEntity

Cardinality and Requirements

Property Value

Aliases

  • Process ID

Identifier and Mapping Information

Annotations

property value
observable_id 15

Schema Source

Mappings

Mapping Type Mapped Value
self ocsf:pid
native ocsf:pid

LinkML Source

name: pid
annotations:
  observable_id:
    tag: observable_id
    value: 15
description: 'The process identifier, as reported by the operating system. Process
  ID (PID)

  is a number used by the operating system to uniquely identify an active

  process.'
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Process ID
rank: 1000
alias: pid
domain_of:
- ProcessEntity
range: integer