TLS Extension

The TLS Extension object describes additional attributes that extend the base Transport Layer Security (TLS) object.

Attributes

Caption	Name	Type	Description
Data	`data`	JSON	The data contains information specific to the particular extension type.
Raw Data	`raw_data`	JSON	The event data as received from the event source.
Record ID	`record_id`	String	Unique identifier for the object
Type	`type`	String	The TLS extension type. For example: `Server Name`.
Type ID	`type_id`	Integer	The TLS extension type identifier. See The Transport Layer Security (TLS) extension page. `0`: server_name (`SERVER_NAME`) `1`: maximum_fragment_length (`MAXIMUM_FRAGMENT_LENGTH`) `10`: supported_groups (`SUPPORTED_GROUPS`) `13`: signature_algorithms (`SIGNATURE_ALGORITHMS`) `14`: use_srtp (`USE_SRTP`) `15`: heartbeat (`HEARTBEAT`) `16`: application_layer_protocol_negotiation (`APPLICATION_LAYER_PROTOCOL_NEGOTIATION`) `18`: signed_certificate_timestamp (`SIGNED_CERTIFICATE_TIMESTAMP`) `19`: client_certificate_type (`CLIENT_CERTIFICATE_TYPE`) `20`: server_certificate_type (`SERVER_CERTIFICATE_TYPE`) `21`: padding (`PADDING`) `41`: pre_shared_key (`PRE_SHARED_KEY`) `42`: early_data (`EARLY_DATA`) `43`: supported_versions (`SUPPORTED_VERSIONS`) `44`: cookie (`COOKIE`) `45`: psk_key_exchange_modes (`PSK_KEY_EXCHANGE_MODES`) `47`: certificate_authorities (`CERTIFICATE_AUTHORITIES`) `48`: oid_filters (`OID_FILTERS`) `49`: post_handshake_auth (`POST_HANDSHAKE_AUTH`) `5`: status_request (`STATUS_REQUEST`) `50`: signature_algorithms_cert (`SIGNATURE_ALGORITHMS_CERT`) `51`: key_share (`KEY_SHARE`) `99`: Other (`OTHER`)
Unmapped Data	`unmapped`	Unmapped[]	The attributes that are not mapped to the event schema. The names and values of those attributes are specific to the event source.

Relationships

Inbound Relationships

These objects and events reference TLS Extension in their attributes:

Transport Layer Security (TLS)

Outbound Relationships

TLS Extension references the following objects and events in its attributes:

Unmapped

This page describes qdm-1.3.2+ocsf-1.3.0