Network Interface

network_interface

The Network Interface object describes the type and associated attributes of a network interface.

Attributes

CaptionNameTypeDescription
HostnamehostnameHostname

Entity:HOSTNAME
The hostname associated with the network interface.

IP AddressipIP Address

Entity:IP_ADDRESS
The IP address associated with the network interface.

MAC AddressmacMAC Address

Entity:MAC_ADDRESS
The MAC address of the network interface.

NamenameString

The name of the network interface.

NamespacenamespaceString

The namespace is useful in merger or acquisition situations. For example, when similar entities exist that you need to keep separate.

Raw Dataraw_dataJSON

Group:context
The event data as received from the event source.

Record IDrecord_idString

Group:primary
Unique identifier for the object

Subnet Prefix Lengthsubnet_prefixInteger

The subnet prefix length determines the number of bits used to represent the network part of the IP address. The remaining bits are reserved for identifying individual hosts within that subnet.

TypetypeString

The type of network interface.

Type IDtype_idInteger

The network interface type identifier.

  • 0: Unknown (UNKNOWN)
  • 1: Wired (WIRED)
  • 2: Wireless (WIRELESS)
  • 3: Mobile (MOBILE)
  • 4: Tunnel (TUNNEL)
  • 99: Other (OTHER)
Unique IDuidString

The unique identifier for the network interface.

UnmappedunmappedUnmapped[]

Data from the source that was not mapped into the schema.

Relationships

Network Interface shown in context

Inbound Relationships

These objects and events reference Network Interface in their attributes:

Outbound Relationships

Network Interface references the following objects and events in its attributes:

This page describes ocsf-1.4.0