OCSF v1.4.0 compliant event types and converters for ClawdStrike.
This crate provides strongly-typed OCSF event classes, objects, and conversion
utilities. It has no dependency on the clawdstrike engine crate to keep it
lightweight and avoid circular dependencies. Wiring code in hushd or hunt-query
maps internal types to these OCSF structures.
Supported OCSF classes
| Class | class_uid |
Category |
|---|---|---|
| Detection Finding | 2004 | Findings (2) |
| Process Activity | 1007 | System Activity (1) |
| File Activity | 1001 | System Activity (1) |
| Network Activity | 4001 | Network Activity (4) |