Software Package

The Software Package object describes details about a software package. Defined by D3FEND d3f:SoftwarePackage.

Attributes

CaptionNameTypeDescription
Architecture architecture String Architecture is a shorthand name describing the type of computer hardware the packaged software is meant to run on.
The product CPE identifier cpe_name String The Common Platform Enumeration (CPE) name as described by (NIST) For example: cpe:/a:apple:safari:16.2.
Epoch epoch Integer The software package epoch. Epoch is a way to define weighted dependencies based on version numbers.
Hash hash Fingerprint[] Cryptographic hash to identify the binary instance of a software component. This can include any component such file, package, or library.
Software License license String The software license applied to this package.
Name name String The software package name.
Package URL purl String A purl is a URL string used to identify and locate a software package in a mostly universal and uniform way across programming languages, package managers, packaging conventions, tools, APIs and databases.
Raw Data raw_data JSON The event data as received from the event source.
Record ID record_id String Unique identifier for the object
Software Release Details release String Release is the number of times a version of the software has been packaged.
Type type String The type of software package, normalized to the caption of the type_id value. In the case of 'Other', it is defined by the source.
Type ID type_id Integer The type of software package.
  • 0: Unknown (UNKNOWN)
  • 1: Application (APPLICATION)
  • 2: Operating System (OPERATING_SYSTEM)
  • 99: Other (OTHER)
Unmapped Data unmapped Unmapped[] The attributes that are not mapped to the event schema. The names and values of those attributes are specific to the event source.
Vendor Name vendor_name String The name of the vendor who published the software package.
Version version String The software package version.

Relationships

Software Package shown in context

Inbound Relationships

These objects and events reference Software Package in their attributes:

Outbound Relationships

Software Package references the following objects and events in its attributes:

This page describes qdm-1.3.2+ocsf-1.3.0