TLS Extension

tls_extension

The TLS Extension object describes additional attributes that extend the base Transport Layer Security (TLS) object.

Attributes

Caption	Name	Type	Description
Data	`data`	JSON	The data contains information specific to the particular extension type.
Raw Data	`raw_data`	JSON	Group:`context` The event data as received from the event source.
Record ID	`record_id`	String	Group:`primary` Unique identifier for the object
Type	`type`	String	The TLS extension type. For example: `Server Name`.
Type ID	`type_id`	Integer	The TLS extension type identifier. See The Transport Layer Security (TLS) extension page. `0`: server_name (`SERVER_NAME`) `1`: maximum_fragment_length (`MAXIMUM_FRAGMENT_LENGTH`) `10`: supported_groups (`SUPPORTED_GROUPS`) `13`: signature_algorithms (`SIGNATURE_ALGORITHMS`) `14`: use_srtp (`USE_SRTP`) `15`: heartbeat (`HEARTBEAT`) `16`: application_layer_protocol_negotiation (`APPLICATION_LAYER_PROTOCOL_NEGOTIATION`) `18`: signed_certificate_timestamp (`SIGNED_CERTIFICATE_TIMESTAMP`) `19`: client_certificate_type (`CLIENT_CERTIFICATE_TYPE`) `20`: server_certificate_type (`SERVER_CERTIFICATE_TYPE`) `21`: padding (`PADDING`) `41`: pre_shared_key (`PRE_SHARED_KEY`) `42`: early_data (`EARLY_DATA`) `43`: supported_versions (`SUPPORTED_VERSIONS`) `44`: cookie (`COOKIE`) `45`: psk_key_exchange_modes (`PSK_KEY_EXCHANGE_MODES`) `47`: certificate_authorities (`CERTIFICATE_AUTHORITIES`) `48`: oid_filters (`OID_FILTERS`) `49`: post_handshake_auth (`POST_HANDSHAKE_AUTH`) `5`: status_request (`STATUS_REQUEST`) `50`: signature_algorithms_cert (`SIGNATURE_ALGORITHMS_CERT`) `51`: key_share (`KEY_SHARE`) `99`: Other (`OTHER`)
Unmapped	`unmapped`	Unmapped[]	Data from the source that was not mapped into the schema.

Relationships

Inbound Relationships

These objects and events reference TLS Extension in their attributes:

Transport Layer Security (TLS)

Outbound Relationships

TLS Extension references the following objects and events in its attributes:

Unmapped

This page describes ocsf-1.4.0