Remediation

remediation

The Remediation object describes the recommended remediation steps to address identified issue(s).

Attributes

CaptionNameTypeDescription
DescriptiondescString

The description of the remediation strategy.

Knowledgebase Articleskb_article_listKB Article[]

A list of KB articles or patches related to an endpoint. A KB Article contains metadata that describes the patch or an update.

Knowledgebase Articleskb_articlesString[]

The KB article/s related to the entity. A KB Article contains metadata that describes the patch or an update.

🚧 WARNING: DEPRECATED

Knowledgebase Articles has been deprecated since 1.1.0. Use the kb_article_list attribute instead.

Raw Dataraw_dataJSON

Group:context
The event data as received from the event source.

Record IDrecord_idString

Group:primary
Unique identifier for the object

ReferencesreferencesString[]

A list of supporting URL/s, references that help describe the remediation strategy.

UnmappedunmappedUnmapped[]

Data from the source that was not mapped into the schema.

Relationships

Remediation shown in context

Inbound Relationships

These objects and events reference Remediation in their attributes:

Outbound Relationships

Remediation references the following objects and events in its attributes:

This page describes ocsf-1.4.0