Network Interface

The Network Interface object describes the type and associated attributes of a network interface.

Attributes

Caption	Name	Type	Description
Hostname	`hostname`	Hostname	The hostname associated with the network interface.
IP Address	`ip`	IP Address	The IP address associated with the network interface.
MAC Address	`mac`	MAC Address	The MAC address of the network interface.
Name	`name`	String	The name of the network interface.
Namespace	`namespace`	String	The namespace is useful in merger or acquisition situations. For example, when similar entities exist that you need to keep separate.
Raw Data	`raw_data`	JSON	The event data as received from the event source.
Record ID	`record_id`	String	Unique identifier for the object
Reputation Scores	`reputation`	Reputation[]	Contains the original and normalized reputation scores. 🚧 WARNING: DEPRECATED Reputation Scores has been deprecated since 1.1.0. Deprecated in upgrade from ocsf-0.31.1 to qdm-1.1.0
Subnet Prefix Length	`subnet_prefix`	Integer	The subnet prefix length determines the number of bits used to represent the network part of the IP address. The remaining bits are reserved for identifying individual hosts within that subnet.
Type	`type`	String	The type of network interface.
Type ID	`type_id`	Integer	The network interface type identifier. `0`: Unknown (`UNKNOWN`) `1`: Wired (`WIRED`) `2`: Wireless (`WIRELESS`) `3`: Mobile (`MOBILE`) `4`: Tunnel (`TUNNEL`) `99`: Other (`OTHER`)
Unique ID	`uid`	String	The unique identifier for the network interface.
Unmapped Data	`unmapped`	Unmapped[]	The attributes that are not mapped to the event schema. The names and values of those attributes are specific to the event source.

Relationships

Inbound Relationships

These objects and events reference Network Interface in their attributes:

Outbound Relationships

Network Interface references the following objects and events in its attributes:

This page describes qdm-1.3.2+ocsf-1.3.0