DCE/RPC
dce_rpc
The DCE/RPC, or Distributed Computing Environment/Remote Procedure Call, object describes the remote procedure call system for distributed computing environments.
Attributes
| Caption | Name | Type | Description |
|---|---|---|---|
| Command | command |
String | The request command (e.g. REQUEST, BIND). |
| Command Response | command_response |
String | The reply to the request command (e.g. RESPONSE, BINDACK or FAULT). |
| Flags | flags |
String[] | The list of interface flags. |
| Opnum | opnum |
Integer | An operation number used to identify a specific remote procedure call (RPC) method or a method in an interface. |
| Raw Data | raw_data |
JSON |
Group:contextThe event data as received from the event source. |
| Record ID | record_id |
String |
Group:primaryUnique identifier for the object |
| Remote Procedure Call Interface | rpc_interface |
RPC Interface[] | The RPC Interface object describes the details pertaining to the remote procedure call interface. |
| Unmapped | unmapped |
Unmapped[] | Data from the source that was not mapped into the schema. |
Relationships
Inbound Relationships
These objects and events reference DCE/RPC in their attributes:
Outbound Relationships
DCE/RPC references the following objects and events in its attributes:
This page describes ocsf-1.4.0
Updated 3 days ago