Geo Location
location
The Geo Location object describes a geographical location, usually associated with an IP address.
Attributes
| Caption | Name | Type | Description |
|---|---|---|---|
| Aerial Height | aerial_height | String | Expressed as either height above takeoff location or height above ground level (AGL) for a UAS current location. This value is provided in meters and must have a minimum resolution of 1 m. Special Values: Invalid, No Value, or Unknown: -1000 m. |
| City | city | String | The name of the city. |
| Continent | continent | String | The name of the continent. |
| Coordinates | coordinates | Float[] | A two-element array, containing a longitude/latitude pair. The format conforms with GeoJSON. For example: [-73.983, 40.719].
|
| Country | country | String | Entity:COUNTRYThe ISO 3166-1 Alpha-2 country code.Note: The two letter country code should be capitalized. For example: US or CA. |
| Description | desc | String | The description of the geographical location. |
| Geodetic Altitude | geodetic_altitude | String | The aircraft distance above or below the ellipsoid as measured along a line that passes through the aircraft and is normal to the surface of the WGS-84 ellipsoid. This value is provided in meters and must have a minimum resolution of 1 m. Special Values: Invalid, No Value, or Unknown: -1000 m. |
| Geodetic Vertical Accuracy | geodetic_vertical_accuracy | String | Provides quality/containment on geodetic altitude. This is based on ADS-B Geodetic Vertical Accuracy (GVA). Measured in meters. |
| Geohash | geohash | String | Geohash of the geo-coordinates (latitude and longitude).Geohashing is a geocoding system used to encode geographic coordinates in decimal degrees, to a single string. |
| Horizontal Accuracy | horizontal_accuracy | String | Provides quality/containment on horizontal position. This is based on ADS-B NACp. Measured in meters. |
| On Premises | is_on_premises | Boolean | The indication of whether the location is on premises. |
| ISP Name | isp | String | The name of the Internet Service Provider (ISP).
|
| Latitude | lat | Float | The geographical Latitude coordinate represented in Decimal Degrees (DD). For example: 42.361145. |
| Longitude | long | Float | The geographical Longitude coordinate represented in Decimal Degrees (DD). For example: -71.057083. |
| Postal Code | postal_code | String | The postal code of the location. |
| Pressure Altitude | pressure_altitude | String | The uncorrected barometric pressure altitude (based on reference standard 29.92 inHg, 1013.25 mb) provides a reference for algorithms that utilize 'altitude deltas' between aircraft. This value is provided in meters and must have a minimum resolution of 1 m.. Special Values: Invalid, No Value, or Unknown: -1000 m. |
| Provider | provider | String | The provider of the geographical location data. |
| Raw Data | raw_data | JSON | Group:contextThe event data as received from the event source. |
| Record ID | record_id | String | Group:primaryUnique identifier for the object |
| Region | region | String | The alphanumeric code that identifies the principal subdivision (e.g. province or state) of the country. For example, 'CH-VD' for the Canton of Vaud, Switzerland |
| Unmapped | unmapped | Unmapped[] | Data from the source that was not mapped into the schema. |
Relationships
Inbound Relationships
These objects and events reference Geo Location in their attributes:
- Managed Entity
- Domain Contact
- IP Threat Intelligence
- LDAP Person
- OSINT
- Unmanned Aerial System
- Endpoint
- Unmanned System Operating Area
- Network Endpoint
- Device
- Network Proxy Endpoint
- Aircraft
Outbound Relationships
Geo Location references the following objects and events in its attributes:
This page describes qdm-1.5.1+ocsf-1.6.0