DCE/RPC
The DCE/RPC, or Distributed Computing Environment/Remote Procedure Call, object describes the remote procedure call system for distributed computing environments. Defined by D3FEND d3f:RemoteProcedureCall.
Attributes
| Caption | Name | Type | Description |
|---|---|---|---|
| Command | command |
String | The request command (e.g. REQUEST, BIND). |
| Command Response | command_response |
String | The reply to the request command (e.g. RESPONSE, BINDACK or FAULT). |
| Flags | flags |
String[] | The list of interface flags. |
| Network Interfaces | network_interfaces |
Network Interface[] |
The list of DCE/RPC interfaces
|
| Opnum | opnum |
Integer | An operation number used to identify a specific remote procedure call (RPC) method or a method in an interface. |
| Raw Data | raw_data |
JSON | The event data as received from the event source. |
| Record ID | record_id |
String | Unique identifier for the object |
| Remote Procedure Call Interface | rpc_interface |
RPC Interface[] | The RPC Interface object describes the details pertaining to the remote procedure call interface. |
| Unmapped Data | unmapped |
Unmapped[] | The attributes that are not mapped to the event schema. The names and values of those attributes are specific to the event source. |
Relationships
Inbound Relationships
These objects and events reference DCE/RPC in their attributes:
Outbound Relationships
DCE/RPC references the following objects and events in its attributes:
This page describes qdm-1.3.2+ocsf-1.3.0
Updated 6 months ago