Slot: reg_value

The registry value.

URI: ocsf:reg_value Alias: reg_value

Applicable Classes

Name	Description	Modifies Slot
WindowsQueryEvidence	The resulting evidence information that was queried	yes
RegistryValueActivity	Registry Value Activity events reports when a process performs an action on a	yes
WindowsEvidences	Extends the evidences object to add Windows specific fields	yes
RegistryValueQuery	Registry Value Query events report information about discovered Windows	yes

Properties

Type and Range

Property	Value
Range	RegValue
Domain Of	WindowsEvidences, WindowsQueryEvidence, RegistryValueActivity, RegistryValueQuery

Cardinality and Requirements

Property	Value

Aliases

Registry Value

Identifier and Mapping Information

Annotations

property	value
ocsf_extension	windows

Schema Source

from schema: https://w3id.org/lmodel/ocsf

Mappings

Mapping Type	Mapped Value
self	ocsf:reg_value
native	ocsf:reg_value

LinkML Source

name: reg_value
annotations:
  ocsf_extension:
    tag: ocsf_extension
    value: windows
description: The registry value.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Registry Value
rank: 1000
alias: reg_value
domain_of:
- WindowsEvidences
- WindowsQueryEvidence
- RegistryValueActivity
- RegistryValueQuery
range: RegValue