Windows Resource
win_resource
The Windows resource object describes a resource object managed by Windows, such as mutant or timer.
Attributes
Caption | Name | Type | Description |
---|---|---|---|
Data | data | JSON | Additional data describing the resource. |
Data Classification | data_classification | Data Classification[] | Group:
|
Data Classification | data_classifications | Data Classification[] | Group: |
Details | details | String | The string detailing the attributes of the resource object. |
Labels | labels | String[] | The list of labels associated to the resource. |
Name | name | String | The name of the resource object. |
Raw Data | raw_data | JSON | Group: |
Record ID | record_id | String | Group: |
Service Name | svc_name | String | The Windows service acting as the object server for the resource object, such as Security or Security Account Manager. |
Tags | tags | Key:Value object[] | The list of tags; |
Type | type | String | The type of the Windows resource object. |
Type ID | type_id | Integer | The normalized type identifier of the Windows resource object accessed.
|
Unique ID | uid | Resource UID | Entity: |
Unmapped | unmapped | Unmapped[] | Data from the source that was not mapped into the schema. |
Relationships
Inbound Relationships
These objects and events reference Windows Resource in their attributes:
Outbound Relationships
Windows Resource references the following objects and events in its attributes:
This page describes ocsf-1.4.0
Updated 9 days ago