Geo Location
location
The Geo Location object describes a geographical location, usually associated with an IP address.
Attributes
| Caption | Name | Type | Description |
|---|---|---|---|
| Aerial Height | aerial_height |
String |
Expressed as either height above takeoff location or height above ground level (AGL) for a UAS current location. This value is provided in meters and must have a minimum resolution of 1 m. Special Values: Invalid, No Value, or Unknown: -1000 m.
|
| City | city |
String | The name of the city. |
| Continent | continent |
String | The name of the continent. |
| Coordinates | coordinates |
Float[] |
A two-element array, containing a longitude/latitude pair. The format conforms with GeoJSON. For example: [-73.983, 40.719].
|
| Country | country |
String |
Entity:COUNTRYThe ISO 3166-1 Alpha-2 country code. Note: The two letter country code should be capitalized. For example: |
| Description | desc |
String | The description of the geographical location. |
| Geodetic Altitude | geodetic_altitude |
String |
The aircraft distance above or below the ellipsoid as measured along a line that passes through the aircraft and is normal to the surface of the WGS-84 ellipsoid. This value is provided in meters and must have a minimum resolution of 1 m. Special Values: Invalid, No Value, or Unknown: -1000 m.
|
| Geodetic Vertical Accuracy | geodetic_vertical_accuracy |
String | Provides quality/containment on geodetic altitude. This is based on ADS-B Geodetic Vertical Accuracy (GVA). Measured in meters. |
| Geohash | geohash |
String |
Geohash of the geo-coordinates (latitude and longitude). Geohashing is a geocoding system used to encode geographic coordinates in decimal degrees, to a single string. |
| Horizontal Accuracy | horizontal_accuracy |
String | Provides quality/containment on horizontal position. This is based on ADS-B NACp. Measured in meters. |
| On Premises | is_on_premises |
Boolean | The indication of whether the location is on premises. |
| ISP | isp |
String | The name of the Internet Service Provider (ISP). |
| Latitude | lat |
Float |
The geographical Latitude coordinate represented in Decimal Degrees (DD). For example: 42.361145.
|
| Longitude | long |
Float |
The geographical Longitude coordinate represented in Decimal Degrees (DD). For example: -71.057083.
|
| Postal Code | postal_code |
String | The postal code of the location. |
| Pressure Altitude | pressure_altitude |
String |
The uncorrected barometric pressure altitude (based on reference standard 29.92 inHg, 1013.25 mb) provides a reference for algorithms that utilize 'altitude deltas' between aircraft. This value is provided in meters and must have a minimum resolution of 1 m.. Special Values: Invalid, No Value, or Unknown: -1000 m.
|
| Provider | provider |
String | The provider of the geographical location data. |
| Raw Data | raw_data |
JSON |
Group:contextThe event data as received from the event source. |
| Record ID | record_id |
String |
Group:primaryUnique identifier for the object |
| Region | region |
String | The alphanumeric code that identifies the principal subdivision (e.g. province or state) of the country. For example, 'CH-VD' for the Canton of Vaud, Switzerland |
| Unmapped | unmapped |
Unmapped[] | Data from the source that was not mapped into the schema. |
Relationships
Inbound Relationships
These objects and events reference Geo Location in their attributes:
- IP Threat Intelligence
- Managed Entity
- Unmanned System Operating Area
- Device
- Network Proxy Endpoint
- Unmanned Aerial System
- Network Endpoint
- OSINT
- Aircraft
- LDAP Person
- Endpoint
- Domain Contact
Outbound Relationships
Geo Location references the following objects and events in its attributes:
This page describes ocsf-1.4.0
Updated 3 days ago