Fingerprint

The Fingerprint object provides detailed information about a digital fingerprint, which is a compact representation of data used to identify a longer piece of information, such as a public key or file content. It contains the algorithm and value of the fingerprint, enabling efficient and reliable identification of the associated data.

Attributes

Caption	Name	Type	Description
Algorithm	`algorithm`	String	The hash algorithm used to create the digital fingerprint, normalized to the caption of 'algorithm_id'. In the case of 'Other', it is defined by the event source.
Algorithm ID	`algorithm_id`	Integer	The identifier of the normalized hash algorithm, which was used to create the digital fingerprint. `0`: Unknown (`UNKNOWN`) `1`: MD5 (`MD5`) `2`: SHA-1 (`SHA-1`) `3`: SHA-256 (`SHA-256`) `4`: SHA-512 (`SHA-512`) `5`: CTPH (`CTPH`) `6`: TLSH (`TLSH`) `7`: quickXorHash (`QUICKXORHASH`) `99`: Other (`OTHER`)
Raw Data	`raw_data`	JSON	The event data as received from the event source.
Record ID	`record_id`	String	Unique identifier for the object
Unmapped Data	`unmapped`	Unmapped[]	The attributes that are not mapped to the event schema. The names and values of those attributes are specific to the event source.
Value	`value`	String	The digital fingerprint value.

Relationships

Inbound Relationships

These objects and events reference Fingerprint in their attributes:

Outbound Relationships

Fingerprint references the following objects and events in its attributes:

Unmapped

This page describes qdm-1.3.2+ocsf-1.3.0