Endpoint
endpoint
The Endpoint object describes a physical or virtual device that connects to and exchanges information with a computer network. Some examples of endpoints are mobile devices, desktop computers, virtual machines, embedded devices, and servers. Internet-of-Things devices—like cameras, lighting, refrigerators, security systems, smart speakers, and thermostats—are also endpoints.
Attributes
Caption | Name | Type | Description |
---|---|---|---|
Agent List | agent_list | Agent[] | A list of |
Container | container | Container[] | Entity: |
Domain | domain | String | The name of the domain that the endpoint belongs to or that corresponds to the endpoint. |
Hostname | hostname | Hostname | Entity: |
Hardware Info | hw_info | Device Hardware Info[] | The endpoint hardware information. |
Instance ID | instance_uid | String | The unique identifier of a VM instance. |
Network Interface Name | interface_name | String | The name of the network interface (e.g. eth2). |
Network Interface ID | interface_uid | String | The unique identifier of the network interface. |
IP Address | ip | IP Address | Entity: |
Geo Location | location | Geo Location[] | Entity: |
MAC Address | mac | MAC Address | Entity: |
Name | name | String | The short name of the endpoint. |
Namespace PID | namespace_pid | Integer | Group: |
OS | os | Operating System (OS)[] | The endpoint operating system. |
Owner | owner | User[] | Entity: |
Raw Data | raw_data | JSON | Group: |
Record ID | record_id | String | Group: |
Subnet UID | subnet_uid | String | The unique identifier of a virtual subnet. |
Type | type | String | The endpoint type. For example: |
Type ID | type_id | Integer | The endpoint type ID.
|
Unique ID | uid | String | The unique identifier of the endpoint. |
Unmapped | unmapped | Unmapped[] | Data from the source that was not mapped into the schema. |
VLAN | vlan_uid | String | The Virtual LAN identifier. |
VPC UID | vpc_uid | String | The unique identifier of the Virtual Private Cloud (VPC). |
Network Zone | zone | String | The network zone or LAN segment. |
Relationships
Outbound Relationships
Endpoint references the following objects and events in its attributes:
This page describes ocsf-1.4.0
Updated 9 days ago