Skip to content

Slot: win_service

The Windows service.

URI: ocsf:win_service Alias: win_service

Applicable Classes

Name Description Modifies Slot
WindowsServiceActivity Windows Service Activity events report when a process interacts with the yes
WindowsEvidences Extends the evidences object to add Windows specific fields yes
WindowsStartupItem The startup item object describes an application component that has associate... yes

Properties

Type and Range

Property Value
Range WinService
Domain Of WindowsEvidences, WindowsStartupItem, WindowsServiceActivity

Cardinality and Requirements

Property Value

Aliases

  • Windows Service

Identifier and Mapping Information

Annotations

property value
ocsf_extension windows

Schema Source

Mappings

Mapping Type Mapped Value
self ocsf:win_service
native ocsf:win_service

LinkML Source

name: win_service
annotations:
  ocsf_extension:
    tag: ocsf_extension
    value: windows
description: The Windows service.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Windows Service
rank: 1000
alias: win_service
domain_of:
- WindowsEvidences
- WindowsStartupItem
- WindowsServiceActivity
range: WinService