object

An unordered collection of attributes. It defines a set of attributes available in all objects. It can be also used as a generic object to log objects that are not otherwise defined by the schema.

Attributes

CaptionNameTypeDescription
Raw Data raw_data JSON Group:context
The event data as received from the event source.
Record ID record_id String Group:primary
Unique identifier for the object
Unmapped unmapped Unmapped[] Data from the source that was not mapped into the schema.

Relationships

Object shown in context

Outbound Relationships

Object references the following objects and events in its attributes:

This page describes ocsf-1.4.0