HASSH

hassh

The HASSH object contains SSH network fingerprinting values for specific client/server implementations. It provides a standardized way of identifying and categorizing SSH connections based on their unique characteristics and behavior.

Attributes

Caption	Name	Type	Description
Algorithm	`algorithm`	String	The concatenation of key exchange, encryption, authentication and compression algorithms (separated by ';'). NOTE: This is not the underlying algorithm for the hash implementation.
Fingerprint	`fingerprint`	Fingerprint[]	Entity:`FINGERPRINT` The hash of the key exchange, encryption, authentication and compression algorithms.
Raw Data	`raw_data`	JSON	Group:`context` The event data as received from the event source.
Record ID	`record_id`	String	Group:`primary` Unique identifier for the object
Unmapped	`unmapped`	Unmapped[]	Data from the source that was not mapped into the schema.

Relationships

Inbound Relationships

These objects and events reference HASSH in their attributes:

SSH Activity

Outbound Relationships

HASSH references the following objects and events in its attributes:

This page describes ocsf-1.4.0

Updated 9 days ago