Slot: users

The users that pertain to the event or object.

URI: ocsf:users Alias: users

Applicable Classes

Name	Description	Modifies Slot
WindowsQueryEvidence	The resulting evidence information that was queried	no
QueryEvidence	The specific resulting evidence information that was queried or discovered	yes
AdminGroupQuery	Admin Group Query events report information about administrative groups	yes

Properties

Type and Range

Property	Value
Range	User
Domain Of	QueryEvidence, AdminGroupQuery

Cardinality and Requirements

Property	Value
Multivalued	Yes

Aliases

• Users

Identifier and Mapping Information

Schema Source

• from schema: https://w3id.org/lmodel/ocsf

Mappings

Mapping Type	Mapped Value
self	ocsf:users
native	ocsf:users

LinkML Source

name: users
description: The users that pertain to the event or object.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Users
rank: 1000
alias: users
domain_of:
- QueryEvidence
- AdminGroupQuery
range: User
multivalued: true