Slot: verdict_id

The normalized verdict of an Incident.

URI: ocsf:verdict_id Alias: verdict_id

Applicable Classes

Name	Description	Modifies Slot
IncidentProfile	The attributes that add incident handling semantics to a Finding	yes
DataSecurityFinding	A Data Security Finding describes detections or alerts generated by various	no
ApplicationSecurityPostureFinding	The Application Security Posture Finding event is a notification about any bu...	no
DetectionFinding	A Detection Finding describes detections or alerts generated by security	no
Evidences	A collection of evidence artifacts associated to the activity/activities that	yes
WindowsEvidences	Extends the evidences object to add Windows specific fields	no
VulnerabilityFinding	The Vulnerability Finding event is a notification about weakness in an	no
ComplianceFinding	Compliance Finding events describe results of evaluations performed against	no
IncidentFinding	An Incident Finding reports the creation, update, or closure of security	yes
IamAnalysisFinding	This finding represents an IAM analysis result, which evaluates IAM policies,	no
Finding	The Finding event is a generic event that defines a set of attributes availab...	no

Properties

Type and Range

Property	Value
Range	VerdictIdEnum
Domain Of	Evidences, IncidentProfile, IncidentFinding

Cardinality and Requirements

Property	Value

Aliases

Verdict ID

Identifier and Mapping Information

Annotations

property	value
sibling	verdict

Schema Source

from schema: https://w3id.org/lmodel/ocsf

Mappings

Mapping Type	Mapped Value
self	ocsf:verdict_id
native	ocsf:verdict_id

LinkML Source

name: verdict_id
annotations:
  sibling:
    tag: sibling
    value: verdict
description: The normalized verdict of an Incident.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Verdict ID
rank: 1000
alias: verdict_id
domain_of:
- Evidences
- IncidentProfile
- IncidentFinding
range: VerdictIdEnum