Slot: resources
Describes details about resources that were affected by the activity/event.
URI: ocsf:resources
Alias: resources
Applicable Classes
| Name |
Description |
Modifies Slot |
| DataSecurityFinding |
A Data Security Finding describes detections or alerts generated by various |
yes |
| DetectionFinding |
A Detection Finding describes detections or alerts generated by security |
yes |
| ApplicationSecurityPostureFinding |
The Application Security Posture Finding event is a notification about any bu... |
yes |
| Evidences |
A collection of evidence artifacts associated to the activity/activities that |
yes |
| WindowsEvidences |
Extends the evidences object to add Windows specific fields |
no |
| ApiActivity |
API events describe general CRUD (Create, Read, Update, Delete) API activitie... |
yes |
| SecurityFinding |
Security Finding events describe findings, detections, anomalies, alerts and/... |
yes |
| UserAccess |
User Access Management events report management updates to a user's privilege... |
yes |
| ComplianceFinding |
Compliance Finding events describe results of evaluations performed against |
yes |
| VulnerabilityFinding |
The Vulnerability Finding event is a notification about weakness in an |
yes |
| IamAnalysisFinding |
This finding represents an IAM analysis result, which evaluates IAM policies, |
yes |
| CloudResourcesInventoryInfo |
Cloud Resources Inventory Info events report cloud asset inventory data |
yes |
Properties
Type and Range
| Property |
Value |
| Range |
ResourceDetails |
| Domain Of |
Evidences, ApiActivity, CloudResourcesInventoryInfo, ApplicationSecurityPostureFinding, ComplianceFinding, DataSecurityFinding, DetectionFinding, IamAnalysisFinding, SecurityFinding, VulnerabilityFinding, UserAccess |
Cardinality and Requirements
| Property |
Value |
| Multivalued |
Yes |
Aliases
Schema Source
Mappings
| Mapping Type |
Mapped Value |
| self |
ocsf:resources |
| native |
ocsf:resources |
LinkML Source
name: resources
description: Describes details about resources that were affected by the activity/event.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Resources Array
rank: 1000
alias: resources
domain_of:
- Evidences
- ApiActivity
- CloudResourcesInventoryInfo
- ApplicationSecurityPostureFinding
- ComplianceFinding
- DataSecurityFinding
- DetectionFinding
- IamAnalysisFinding
- SecurityFinding
- VulnerabilityFinding
- UserAccess
range: ResourceDetails
multivalued: true