List of all items

Structs

• dictionary::DictAttribute
• dictionary::DictType
• events::BaseEvent
• events::application::ApiActivity
• events::application::Application
• events::application::ApplicationLifecycle
• events::application::DatastoreActivity
• events::application::FileHosting
• events::application::ScanActivity
• events::application::WebResourceAccessActivity
• events::application::WebResourcesActivity
• events::discovery::AdminGroupQuery
• events::discovery::ConfigState
• events::discovery::DeviceConfigStateChange
• events::discovery::Discovery
• events::discovery::DiscoveryResult
• events::discovery::FileQuery
• events::discovery::FolderQuery
• events::discovery::InventoryInfo
• events::discovery::JobQuery
• events::discovery::KernelObjectQuery
• events::discovery::ModuleQuery
• events::discovery::NetworkConnectionQuery
• events::discovery::NetworksQuery
• events::discovery::PatchState
• events::discovery::PeripheralDeviceQuery
• events::discovery::ProcessQuery
• events::discovery::ServiceQuery
• events::discovery::SessionQuery
• events::discovery::UserInventory
• events::discovery::UserQuery
• events::findings::ComplianceFinding
• events::findings::DataSecurityFinding
• events::findings::DetectionFinding
• events::findings::Finding
• events::findings::IncidentFinding
• events::findings::SecurityFinding
• events::findings::VulnerabilityFinding
• events::iam::AccountChange
• events::iam::Authentication
• events::iam::AuthorizeSession
• events::iam::EntityManagement
• events::iam::GroupManagement
• events::iam::Iam
• events::iam::UserAccess
• events::network::DhcpActivity
• events::network::DnsActivity
• events::network::EmailActivity
• events::network::EmailFileActivity
• events::network::EmailUrlActivity
• events::network::FtpActivity
• events::network::HttpActivity
• events::network::Network
• events::network::NetworkActivity
• events::network::NetworkFileActivity
• events::network::NtpActivity
• events::network::RdpActivity
• events::network::SmbActivity
• events::network::SshActivity
• events::network::TunnelActivity
• events::system::FileActivity
• events::system::KernelActivity
• events::system::KernelExtension
• events::system::MemoryActivity
• events::system::ModuleActivity
• events::system::ProcessActivity
• events::system::ScheduledJobActivity
• events::system::System

Enums

• categories::Category
• dictionary::TypeNames

Statics

• OCSF_SCHEMA_VERSION

Constants

• dictionary::ACCESSED_TIME
• dictionary::ACCESSOR
• dictionary::ACCESS_LIST
• dictionary::ACCESS_MASK
• dictionary::ACCESS_RESULT
• dictionary::ACCOUNT
• dictionary::ACK_REASON
• dictionary::ACK_RESULT
• dictionary::ACTION
• dictionary::ACTION_ID
• dictionary::ACTIVITY_ID
• dictionary::ACTIVITY_NAME
• dictionary::ACTOR
• dictionary::ACTUAL_PERMISSIONS
• dictionary::AFFECTED_CODE
• dictionary::AFFECTED_PACKAGES
• dictionary::AGENT
• dictionary::AGENT_LIST
• dictionary::ALERT
• dictionary::ALGORITHM
• dictionary::ALGORITHM_ID
• dictionary::ANALYTIC
• dictionary::ANSWERS
• dictionary::API
• dictionary::APP
• dictionary::APP_NAME
• dictionary::APP_UID
• dictionary::ARCHITECTURE
• dictionary::ARGS
• dictionary::ASSIGNEE
• dictionary::ASSIGNEE_GROUP
• dictionary::ATTACKS
• dictionary::ATTEMPT
• dictionary::ATTRIBUTES
• dictionary::AUTHORIZATIONS
• dictionary::AUTH_FACTORS
• dictionary::AUTH_PROTOCOL
• dictionary::AUTH_PROTOCOL_ID
• dictionary::AUTH_TYPE
• dictionary::AUTH_TYPE_ID
• dictionary::AUTONOMOUS_SYSTEM
• dictionary::AUTOSCALE_UID
• dictionary::BANNER
• dictionary::BASE_ADDRESS
• dictionary::BASE_SCORE
• dictionary::BIOS_DATE
• dictionary::BIOS_MANUFACTURER
• dictionary::BIOS_VER
• dictionary::BOUNDARY
• dictionary::BOUNDARY_ID
• dictionary::BUILD
• dictionary::BULLETIN
• dictionary::BYTES
• dictionary::BYTES_IN
• dictionary::BYTES_OUT
• dictionary::CAPABILITIES
• dictionary::CAPTION
• dictionary::CATEGORIES
• dictionary::CATEGORY
• dictionary::CATEGORY_ID
• dictionary::CATEGORY_IDS
• dictionary::CATEGORY_NAME
• dictionary::CATEGORY_UID
• dictionary::CC
• dictionary::CERTIFICATE
• dictionary::CERTIFICATE_CHAIN
• dictionary::CHASSIS
• dictionary::CHUNKS
• dictionary::CHUNKS_IN
• dictionary::CHUNKS_OUT
• dictionary::CIPHER
• dictionary::CIS_BENCHMARK
• dictionary::CIS_BENCHMARK_RESULT
• dictionary::CIS_CONTROLS
• dictionary::CIS_CSC
• dictionary::CITY
• dictionary::CLASS
• dictionary::CLASSIFICATION
• dictionary::CLASSIFICATIONS
• dictionary::CLASSIFICATION_IDS
• dictionary::CLASS_NAME
• dictionary::CLASS_UID
• dictionary::CLIENT_CIPHERS
• dictionary::CLIENT_DIALECTS
• dictionary::CLIENT_HASSH
• dictionary::CLOUD
• dictionary::CLOUD_PARTITION
• dictionary::CMD_LINE
• dictionary::CODE
• dictionary::CODES
• dictionary::COLOR_DEPTH
• dictionary::COMMAND
• dictionary::COMMAND_RESPONSE
• dictionary::COMMAND_RESPONSES
• dictionary::COMMAND_UID
• dictionary::COMMENT
• dictionary::COMPANY_NAME
• dictionary::COMPLIANCE
• dictionary::COMPONENT
• dictionary::CONDITION
• dictionary::CONFIDENCE
• dictionary::CONFIDENCE_ID
• dictionary::CONFIDENCE_SCORE
• dictionary::CONFIDENTIALITY
• dictionary::CONFIDENTIALITY_ID
• dictionary::CONNECTION_INFO
• dictionary::CONNECTION_UID
• dictionary::CONTAINER
• dictionary::CONTAINERS
• dictionary::CONTENT_TYPE
• dictionary::CONTINENT
• dictionary::CONTROL
• dictionary::COORDINATES
• dictionary::CORRELATION_UID
• dictionary::COST_CENTER
• dictionary::COUNT
• dictionary::COUNTRY
• dictionary::CPE_NAME
• dictionary::CPU_BITS
• dictionary::CPU_CORES
• dictionary::CPU_COUNT
• dictionary::CPU_SPEED
• dictionary::CPU_TYPE
• dictionary::CREATED_TIME
• dictionary::CREATE_MASK
• dictionary::CREATOR
• dictionary::CREDENTIAL_UID
• dictionary::CRITICALITY
• dictionary::CUSTOMER_UID
• dictionary::CVE
• dictionary::CVES
• dictionary::CVSS
• dictionary::CWE
• dictionary::CWE_UID
• dictionary::CWE_URL
• dictionary::DATA
• dictionary::DATABASE
• dictionary::DATABUCKET
• dictionary::DATA_CLASSIFICATION
• dictionary::DATA_LIFECYCLE_STATE
• dictionary::DATA_LIFECYCLE_STATE_ID
• dictionary::DATA_SECURITY
• dictionary::DATA_SOURCES
• dictionary::DCE_RPC
• dictionary::DECISION
• dictionary::DELAY
• dictionary::DELETED_TIME
• dictionary::DELIVERED_TO
• dictionary::DEPTH
• dictionary::DESC
• dictionary::DESKTOP_DISPLAY
• dictionary::DETAILS
• dictionary::DETECTION_PATTERN
• dictionary::DETECTION_SYSTEM
• dictionary::DETECTION_SYSTEM_ID
• dictionary::DETECTION_UID
• dictionary::DEVELOPER_UID
• dictionary::DEVICE
• dictionary::DEVICES
• dictionary::DIALECT
• dictionary::DIGEST
• dictionary::DIRECTION
• dictionary::DIRECTION_ID
• dictionary::DISPERSION
• dictionary::DISPOSITION
• dictionary::DISPOSITION_ID
• dictionary::DKIM
• dictionary::DKIM_DOMAIN
• dictionary::DKIM_SIGNATURE
• dictionary::DMARC
• dictionary::DMARC_OVERRIDE
• dictionary::DMARC_POLICY
• dictionary::DOMAIN
• dictionary::DRIVER
• dictionary::DST_ENDPOINT
• dictionary::DURATION
• dictionary::EDITION
• dictionary::EMAIL
• dictionary::EMAIL_ADDR
• dictionary::EMAIL_ADDRS
• dictionary::EMAIL_AUTH
• dictionary::EMAIL_UID
• dictionary::EMPLOYEE_UID
• dictionary::ENDPOINT_CONNECTIONS
• dictionary::END_LINE
• dictionary::END_TIME
• dictionary::ENRICHMENTS
• dictionary::ENTITY
• dictionary::ENTITY_RESULT
• dictionary::EPOCH
• dictionary::EPSS
• dictionary::ERROR
• dictionary::ERROR_MESSAGE
• dictionary::EVENT_CODE
• dictionary::EVIDENCE
• dictionary::EVIDENCES
• dictionary::EXIT_CODE
• dictionary::EXPIRATION_REASON
• dictionary::EXPIRATION_TIME
• dictionary::EXTENSION
• dictionary::EXTENSIONS
• dictionary::EXTENSION_LIST
• dictionary::FACTOR_TYPE
• dictionary::FACTOR_TYPE_ID
• dictionary::FEATURE
• dictionary::FILE
• dictionary::FILE_DIFF
• dictionary::FILE_RESULT
• dictionary::FINDING
• dictionary::FINDING_INFO
• dictionary::FINDING_INFO_LIST
• dictionary::FINGERPRINT
• dictionary::FINGERPRINTS
• dictionary::FIREWALL_RULE
• dictionary::FIRST_SEEN_TIME
• dictionary::FIXED_IN_VERSION
• dictionary::FIX_AVAILABLE
• dictionary::FLAGS
• dictionary::FLAG_IDS
• dictionary::FOLDER
• dictionary::FROM
• dictionary::FULL_NAME
• dictionary::FUNCTION_KEYS
• dictionary::FUNCTION_NAME
• dictionary::GEOHASH
• dictionary::GIVEN_NAME
• dictionary::GROUP
• dictionary::GROUPS
• dictionary::GROUP_NAME
• dictionary::HANDSHAKE_DUR
• dictionary::HASH
• dictionary::HASHES
• dictionary::HIRE_TIME
• dictionary::HOSTNAME
• dictionary::HTTP_COOKIES
• dictionary::HTTP_HEADERS
• dictionary::HTTP_METHOD
• dictionary::HTTP_ONLY
• dictionary::HTTP_REQUEST
• dictionary::HTTP_RESPONSE
• dictionary::HTTP_STATUS
• dictionary::HW_INFO
• dictionary::HYPERVISOR
• dictionary::IDENTIFIER_COOKIE
• dictionary::IDP
• dictionary::IMAGE
• dictionary::IME
• dictionary::IMEI
• dictionary::IMPACT
• dictionary::IMPACT_ID
• dictionary::IMPACT_SCORE
• dictionary::INJECTION_TYPE
• dictionary::INJECTION_TYPE_ID
• dictionary::INSTANCE_UID
• dictionary::INTEGRITY
• dictionary::INTEGRITY_ID
• dictionary::INTERFACE_NAME
• dictionary::INTERFACE_UID
• dictionary::INTERMEDIATE_IPS
• dictionary::INVOKED_BY
• dictionary::IP
• dictionary::ISP
• dictionary::ISSUER
• dictionary::IS_APPLIED
• dictionary::IS_CLEARTEXT
• dictionary::IS_COMPLIANT
• dictionary::IS_DEFAULT
• dictionary::IS_EXPLOIT_AVAILABLE
• dictionary::IS_FIX_AVAILABLE
• dictionary::IS_HOTP
• dictionary::IS_HTTP_ONLY
• dictionary::IS_MANAGED
• dictionary::IS_MFA
• dictionary::IS_NEW_LOGON
• dictionary::IS_ON_PREMISES
• dictionary::IS_PERSONAL
• dictionary::IS_REMOTE
• dictionary::IS_RENEWAL
• dictionary::IS_SECURE
• dictionary::IS_SUPERSEDED
• dictionary::IS_SUSPECTED_BREACH
• dictionary::IS_SYSTEM
• dictionary::IS_TOTP
• dictionary::IS_TRUSTED
• dictionary::IS_VPN
• dictionary::JA3S_HASH
• dictionary::JA3_HASH
• dictionary::JOB
• dictionary::JOB_TITLE
• dictionary::KB_ARTICLES
• dictionary::KB_ARTICLE_LIST
• dictionary::KERNEL
• dictionary::KEYBOARD_INFO
• dictionary::KEYBOARD_LAYOUT
• dictionary::KEYBOARD_SUBTYPE
• dictionary::KEYBOARD_TYPE
• dictionary::KEY_LENGTH
• dictionary::KILL_CHAIN
• dictionary::LABELS
• dictionary::LANG
• dictionary::LAST_LOGIN_TIME
• dictionary::LAST_RUN_TIME
• dictionary::LAST_SEEN_TIME
• dictionary::LAT
• dictionary::LATENCY
• dictionary::LDAP_CN
• dictionary::LDAP_DN
• dictionary::LDAP_PERSON
• dictionary::LEASE_DUR
• dictionary::LEAVE_TIME
• dictionary::LENGTH
• dictionary::LICENSE
• dictionary::LINEAGE
• dictionary::LOADED_MODULES
• dictionary::LOAD_BALANCER
• dictionary::LOAD_TYPE
• dictionary::LOAD_TYPE_ID
• dictionary::LOCATION
• dictionary::LOGGED_TIME
• dictionary::LOGGERS
• dictionary::LOGON_PROCESS
• dictionary::LOGON_TYPE
• dictionary::LOGON_TYPE_ID
• dictionary::LOG_LEVEL
• dictionary::LOG_NAME
• dictionary::LOG_PROVIDER
• dictionary::LOG_VERSION
• dictionary::LONG
• dictionary::MAC
• dictionary::MALWARE
• dictionary::MANAGER
• dictionary::MATCH_DETAILS
• dictionary::MATCH_LOCATION
• dictionary::MESSAGE
• dictionary::MESSAGE_UID
• dictionary::METADATA
• dictionary::METRICS
• dictionary::MIME_TYPE
• dictionary::MODEL
• dictionary::MODIFIED_TIME
• dictionary::MODIFIER
• dictionary::MODULE
• dictionary::NAME
• dictionary::NAMESPACE
• dictionary::NAMESPACE_PID
• dictionary::NETWORK_DRIVER
• dictionary::NETWORK_ENDPOINT
• dictionary::NETWORK_INTERFACES
• dictionary::NEXT_RUN_TIME
• dictionary::NIST
• dictionary::NUMBER
• dictionary::NUM_DETECTIONS
• dictionary::NUM_FILES
• dictionary::NUM_FOLDERS
• dictionary::NUM_NETWORK_ITEMS
• dictionary::NUM_PROCESSES
• dictionary::NUM_REGISTRY_ITEMS
• dictionary::NUM_RESOLUTIONS
• dictionary::NUM_SKIPPED_ITEMS
• dictionary::NUM_TRUSTED_ITEMS
• dictionary::NUM_VIOLATIONS
• dictionary::OBSERVABLES
• dictionary::OFFICE_LOCATION
• dictionary::OPCODE
• dictionary::OPCODE_ID
• dictionary::OPEN_MASK
• dictionary::OPEN_TYPE
• dictionary::OPERATION
• dictionary::OPNUM
• dictionary::ORCHESTRATOR
• dictionary::ORG
• dictionary::ORIGINAL_TIME
• dictionary::OS
• dictionary::OU_NAME
• dictionary::OU_UID
• dictionary::OVERALL_SCORE
• dictionary::OWNER
• dictionary::PACKAGE
• dictionary::PACKAGES
• dictionary::PACKAGE_MANAGER
• dictionary::PACKETS
• dictionary::PACKETS_IN
• dictionary::PACKETS_OUT
• dictionary::PACKET_UID
• dictionary::PARENT_FOLDER
• dictionary::PARENT_PROCESS
• dictionary::PATH
• dictionary::PATTERN_MATCH
• dictionary::PERCENTILE
• dictionary::PERIPHERAL_DEVICE
• dictionary::PERMISSION
• dictionary::PHASE
• dictionary::PHASE_ID
• dictionary::PHONES
• dictionary::PHONE_NUMBER
• dictionary::PHYSICAL_HEIGHT
• dictionary::PHYSICAL_ORIENTATION
• dictionary::PHYSICAL_WIDTH
• dictionary::PID
• dictionary::POD_UUID
• dictionary::POLICIES
• dictionary::POLICY
• dictionary::PORT
• dictionary::POSTAL_CODE
• dictionary::PRECISION
• dictionary::PREV_SECURITY_LEVEL
• dictionary::PREV_SECURITY_LEVEL_ID
• dictionary::PREV_SECURITY_STATES
• dictionary::PRIORITY
• dictionary::PRIORITY_ID
• dictionary::PRIVILEGES
• dictionary::PROCESS
• dictionary::PROCESSED_TIME
• dictionary::PRODUCT
• dictionary::PRODUCT_UID
• dictionary::PROFILES
• dictionary::PROJECT_UID
• dictionary::PROTOCOL_NAME
• dictionary::PROTOCOL_NUM
• dictionary::PROTOCOL_VER
• dictionary::PROTOCOL_VER_ID
• dictionary::PROVIDER
• dictionary::PROXY
• dictionary::PROXY_CONNECTION_INFO
• dictionary::PROXY_ENDPOINT
• dictionary::PROXY_HTTP_REQUEST
• dictionary::PROXY_HTTP_RESPONSE
• dictionary::PROXY_TLS
• dictionary::PROXY_TRAFFIC
• dictionary::PURL
• dictionary::QUERY
• dictionary::QUERY_INFO
• dictionary::QUERY_RESULT
• dictionary::QUERY_RESULT_ID
• dictionary::QUERY_STRING
• dictionary::QUERY_TIME
• dictionary::RAM_SIZE
• dictionary::RATE_LIMIT
• dictionary::RAW_DATA
• dictionary::RAW_HEADER
• dictionary::RCODE
• dictionary::RCODE_ID
• dictionary::RDATA
• dictionary::REFERENCES
• dictionary::REFERRER
• dictionary::REGION
• dictionary::REGISTRAR
• dictionary::RELATED_ANALYTICS
• dictionary::RELATED_EVENTS
• dictionary::RELATED_VULNERABILITIES
• dictionary::RELAY
• dictionary::RELEASE
• dictionary::REMEDIATION
• dictionary::REMOTE_DISPLAY
• dictionary::REPLY_TO
• dictionary::REPUTATION
• dictionary::REQUEST
• dictionary::REQUESTED_PERMISSIONS
• dictionary::REQUIREMENTS
• dictionary::RESOURCE
• dictionary::RESOURCES
• dictionary::RESOURCES_RESULT
• dictionary::RESOURCE_TYPE
• dictionary::RESPONSE
• dictionary::RESPONSE_TIME
• dictionary::RISK_DETAILS
• dictionary::RISK_LEVEL
• dictionary::RISK_LEVEL_ID
• dictionary::RISK_SCORE
• dictionary::RPC_INTERFACE
• dictionary::RULE
• dictionary::RUNTIME
• dictionary::RUN_STATE
• dictionary::RUN_STATE_ID
• dictionary::SAMESITE
• dictionary::SANDBOX
• dictionary::SANS
• dictionary::SCALE_FACTOR
• dictionary::SCAN
• dictionary::SCHEDULE_UID
• dictionary::SCHEME
• dictionary::SCORE
• dictionary::SCORE_ID
• dictionary::SECURE
• dictionary::SECURITY_DESCRIPTOR
• dictionary::SECURITY_LEVEL
• dictionary::SECURITY_LEVEL_ID
• dictionary::SECURITY_QUESTIONS
• dictionary::SECURITY_STATES
• dictionary::SENSITIVITY
• dictionary::SEQUENCE
• dictionary::SERIAL_NUMBER
• dictionary::SERVER_CIPHERS
• dictionary::SERVER_HASSH
• dictionary::SERVICE
• dictionary::SESSION
• dictionary::SEVERITY
• dictionary::SEVERITY_ID
• dictionary::SHARE
• dictionary::SHARE_TYPE
• dictionary::SHARE_TYPE_ID
• dictionary::SIGNATURE
• dictionary::SIZE
• dictionary::SMTP_FROM
• dictionary::SMTP_HELLO
• dictionary::SMTP_TO
• dictionary::SNI
• dictionary::SPF
• dictionary::SP_NAME
• dictionary::SP_VER
• dictionary::SRC_ENDPOINT
• dictionary::SRC_URL
• dictionary::STANDARDS
• dictionary::START_ADDRESS
• dictionary::START_LINE
• dictionary::START_TIME
• dictionary::STATE
• dictionary::STATE_ID
• dictionary::STATUS
• dictionary::STATUS_CODE
• dictionary::STATUS_DETAIL
• dictionary::STATUS_ID
• dictionary::STRATUM
• dictionary::STRATUM_ID
• dictionary::SUBDOMAIN
• dictionary::SUBJECT
• dictionary::SUBNET
• dictionary::SUBNET_PREFIX
• dictionary::SUBNET_UID
• dictionary::SUB_TECHNIQUE
• dictionary::SUPPORTING_DATA
• dictionary::SURNAME
• dictionary::SVC_NAME
• dictionary::SYSTEM_CALL
• dictionary::TABLE
• dictionary::TACTIC
• dictionary::TACTICS
• dictionary::TAG
• dictionary::TCP_FLAGS
• dictionary::TECHNIQUE
• dictionary::TENANT_UID
• dictionary::TERMINAL
• dictionary::TERMINATED_TIME
• dictionary::TID
• dictionary::TIME
• dictionary::TIMEZONE_OFFSET
• dictionary::TITLE
• dictionary::TLS
• dictionary::TLS_EXTENSION_LIST
• dictionary::TO
• dictionary::TOTAL
• dictionary::TRAFFIC
• dictionary::TRANSACTION_UID
• dictionary::TRANSMIT_TIME
• dictionary::TREE_UID
• dictionary::TTL
• dictionary::TUNNEL_INTERFACE
• dictionary::TUNNEL_TYPE
• dictionary::TUNNEL_TYPE_ID
• dictionary::TYPE
• dictionary::TYPES
• dictionary::TYPE_ID
• dictionary::TYPE_NAME
• dictionary::TYPE_UID
• dictionary::UID
• dictionary::UID_ALT
• dictionary::UNMAPPED
• dictionary::URL
• dictionary::URL_STRING
• dictionary::USER
• dictionary::USERS
• dictionary::USER_AGENT
• dictionary::USER_RESULT
• dictionary::UUID
• dictionary::VALUE
• dictionary::VECTOR_STRING
• dictionary::VENDOR_NAME
• dictionary::VERDICT
• dictionary::VERDICT_ID
• dictionary::VERSION
• dictionary::VLAN_UID
• dictionary::VPC_UID
• dictionary::VULNERABILITIES
• dictionary::VULNERABILITY
• dictionary::WEB_RESOURCES
• dictionary::WEB_RESOURCES_RESULT
• dictionary::XATTRIBUTES
• dictionary::X_FORWARDED_FOR
• dictionary::X_ORIGINATING_IP
• dictionary::ZONE