Device Hardware Info

device_hw_info

The Device Hardware Information object contains details and specifications of the physical components that make up a device. This information provides an overview of the hardware capabilities, configuration, and characteristics of the device.

Attributes

CaptionNameTypeDescription
BIOS Datebios_dateString

The BIOS date. For example: 03/31/16.

BIOS Manufacturerbios_manufacturerString

The BIOS manufacturer. For example: LENOVO.

BIOS Versionbios_verString

The BIOS version. For example: LENOVO G5ETA2WW (2.62).

ChassischassisString

The chassis type describes the system enclosure or physical form factor. Such as the following examples for Windows Windows Chassis Types

CPU Architecturecpu_architectureString

The CPU architecture, normalized to the caption of the cpu_architecture_id value. In the case of Other, it is defined by the source.

CPU Architecture IDcpu_architecture_idInteger

The normalized identifier of the CPU architecture.

  • 0: Unknown (UNKNOWN)
  • 1: x86 (X86)
  • 2: ARM (ARM)
  • 3: RISC-V (RISC_V)
  • 99: Other (OTHER)
CPU Bitscpu_bitsInteger

The cpu architecture, the number of bits used for addressing in memory. For example: 32 or 64.

CPU Corescpu_coresInteger

The number of processor cores in all installed processors. For Example: 42.

CPU Countcpu_countInteger

The number of physical processors on a system. For example: 1.

Processor Speedcpu_speedInteger

The speed of the processor in Mhz. For Example: 4200.

Processor Typecpu_typeString

The processor type. For example: x86 Family 6 Model 37 Stepping 5.

Desktop Displaydesktop_displayDisplay[]

The desktop display affiliated with the event

Keyboard Informationkeyboard_infoKeyboard Information[]

The keyboard detailed information.

RAM Sizeram_sizeInteger

The total amount of installed RAM, in Megabytes. For example: 2048.

Raw Dataraw_dataJSON

Group:context
The event data as received from the event source.

Record IDrecord_idString

Group:primary
Unique identifier for the object

Serial Numberserial_numberString

Entity:SERIAL_NUMBER
The device manufacturer serial number.

UnmappedunmappedUnmapped[]

Data from the source that was not mapped into the schema.

UUIDuuidUUID

The device manufacturer assigned universally unique hardware identifier. For SMBIOS compatible devices such as those running Linux and Windows, it is the UUID member of the System Information structure in the SMBIOS information. For macOS devices, it is the Hardware UUID (also known as IOPlatformUUID in the I/O Registry).

Vendor Namevendor_nameString

The device manufacturer.

Relationships

Device Hardware Info shown in context

Inbound Relationships

These objects and events reference Device Hardware Info in their attributes:

Outbound Relationships

Device Hardware Info references the following objects and events in its attributes:

This page describes qdm-1.5.1+ocsf-1.6.0