HASSH
hassh
The HASSH object contains SSH network fingerprinting values for specific client/server implementations. It provides a standardized way of identifying and categorizing SSH connections based on their unique characteristics and behavior.
Attributes
| Caption | Name | Type | Description |
|---|---|---|---|
| Algorithm | algorithm | String | The concatenation of key exchange, encryption, authentication and compression algorithms (separated by ';'). NOTE: This is not the underlying algorithm for the hash implementation. |
| Fingerprint | fingerprint | Fingerprint[] | Entity:FINGERPRINTThe hash of the key exchange, encryption, authentication and compression algorithms. |
| Raw Data | raw_data | JSON | Group:contextThe event data as received from the event source. |
| Record ID | record_id | String | Group:primaryUnique identifier for the object |
| Unmapped | unmapped | Unmapped[] | Data from the source that was not mapped into the schema. |
Relationships
Inbound Relationships
These objects and events reference HASSH in their attributes:
Outbound Relationships
HASSH references the following objects and events in its attributes:
This page describes qdm-1.5.1+ocsf-1.6.0