Fingerprint
The Fingerprint object provides detailed information about a digital fingerprint, which is a compact representation of data used to identify a longer piece of information, such as a public key or file content. It contains the algorithm and value of the fingerprint, enabling efficient and reliable identification of the associated data.
Attributes
| Caption | Name | Type | Description |
|---|---|---|---|
| Algorithm | algorithm |
String | The hash algorithm used to create the digital fingerprint, normalized to the caption of 'algorithm_id'. In the case of 'Other', it is defined by the event source. |
| Algorithm ID | algorithm_id |
Integer |
The identifier of the normalized hash algorithm, which was used to create the digital fingerprint.
|
| Raw Data | raw_data |
JSON | The event data as received from the event source. |
| Record ID | record_id |
String | Unique identifier for the object |
| Unmapped Data | unmapped |
Unmapped[] | The attributes that are not mapped to the event schema. The names and values of those attributes are specific to the event source. |
| Value | value |
String | The digital fingerprint value. |
Relationships
Inbound Relationships
These objects and events reference Fingerprint in their attributes:
- Digital Certificate
- Affected Software Package
- Transport Layer Security (TLS)
- File Threat Intelligence
- File
- Digital Signature
- Software Package
- Container
- HASSH
Outbound Relationships
Fingerprint references the following objects and events in its attributes:
This page describes qdm-1.3.2+ocsf-1.3.0
Updated 2 months ago