HTTP Response
http_response
The HTTP Response object contains detailed information about the response sent from a web server to the requester. It encompasses attributes and metadata that describe the response status, headers, body content, and other relevant information.
Attributes
Caption | Name | Type | Description |
---|---|---|---|
Response Body Length | body_length |
Integer | The actual length of the HTTP response body, in number of bytes, independent of a potentially existing Content-Length header. |
Response Code | code |
Integer | The Hypertext Transfer Protocol (HTTP) status code returned from the web server to the client. For example, 200. |
HTTP Content Type | content_type |
String | The request header that identifies the original media type of the resource (prior to any content encoding applied for sending). |
HTTP Headers | http_headers |
HTTP Header[] | Additional HTTP headers of an HTTP request or response. |
Latency | latency |
Integer | The HTTP response latency measured in milliseconds. |
Response Length | length |
Integer | The length of the entire HTTP response, in number of bytes. |
Message | message |
String | The description of the event/finding, as defined by the source. |
Raw Data | raw_data |
JSON |
Group:context The event data as received from the event source. |
Record ID | record_id |
String |
Group:primary Unique identifier for the object |
Status | status |
String | The response status. For example: A successful HTTP status of 'OK' which corresponds to a code of 200. |
Unmapped | unmapped |
Unmapped[] | Data from the source that was not mapped into the schema. |
Relationships
Inbound Relationships
These objects and events reference HTTP Response in their attributes:
- RDP Activity
- Authorize Session
- Web Resource Access Activity
- Evidence Artifacts
- HTTP Activity
- Entity Management
- Datastore Activity
- DNS Activity
- FTP Activity
- Web Resources Activity
- Tunnel Activity
- Authentication
- User Access Management
- SMB Activity
- API Activity
- Network
- DHCP Activity
- Group Management
- SSH Activity
- NTP Activity
- Network Activity
- Network File Activity
- Account Change
- Identity & Access Management
Outbound Relationships
HTTP Response references the following objects and events in its attributes:
This page describes ocsf-1.4.0
Updated 8 days ago