Skip to content

Issues: ocsf/ocsf-schema

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

58 Open 271 Closed
58 Open 271 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

How do I model a detection?
#1177 opened Sep 13, 2024 by pagbabian-splunk
7
Missing relation fields in application lifecycle
#1161 opened Aug 20, 2024 by andurin
Activity class required to represent script execution events
#1156 opened Aug 13, 2024 by davemcatcisco
3
digital_signature name mismatch between objects and dictionary.json grammar_consistency Issues related to the attribute grammar consistency work-stream
#1151 opened Jul 29, 2024 by medallium
2
Enrichment extension
#1148 opened Jul 22, 2024 by PavelJurka
Kubernetes extension - the initial shape
#1131 opened Jul 1, 2024 by PavelJurka
Should Http response and Http request be present together? bug Something isn't working
#1123 opened Jun 26, 2024 by zschmerber
@zschmerber
USER, LDAP Person extension by useful fields + cloud profile added to support Azure AD v1.4.0 or later Changes marked for versions beyond v1.3.0 of OCSF
#1122 opened Jun 26, 2024 by PavelJurka
1
The Job object cannot adequately describe Windows scheduled jobs
#1118 opened Jun 21, 2024 by davemcatcisco
Mapping for mailbox rule events
#1112 opened Jun 13, 2024 by eliraz-levi
2
Extend compliance by Compliance references KB Articles and Compliance standards KB Articles
#1109 opened Jun 11, 2024 by PavelJurka
User should have an array of Account objects
#1107 opened Jun 4, 2024 by sonnens
User object should include an Enabled / Disabled state.
#1106 opened Jun 4, 2024 by pagbabian-splunk
1
Reputation Object and base_score
#1104 opened Jun 3, 2024 by lcostantino
Clarify what the domain attribute entails network_activity Issues related to Network Activity Category
#1102 opened Jun 1, 2024 by pagbabian-splunk
1
Add query tld, parent domain, and subdomain to the dns_activity class network_activity Issues related to Network Activity Category
#1097 opened May 23, 2024 by hal308
1
Add Query length & Answer length to dns_activity class enhancement New feature or request network_activity Issues related to Network Activity Category non_breaking Non Breaking, backwards compatible changes v1.4.0 or later Changes marked for versions beyond v1.3.0 of OCSF
#1092 opened May 21, 2024 by zschmerber
@zschmerber
1
Package extension (affected packages) by vendor name and type
#1091 opened May 21, 2024 by PavelJurka
Adjust Windows Resource Activity class (201003) to be aligned with Windows event 4662
#1090 opened May 21, 2024 by eliraz-levi
3
_resource object has optional constrained fields of name and uid - should be recommended non_breaking Non Breaking, backwards compatible changes
#1086 opened May 11, 2024 by pagbabian-splunk
Digital signature extension of signature state enhancement New feature or request
#1069 opened May 2, 2024 by PavelJurka
Lifecycle/OS Patch State , update application_activity Issues related to Application Activity Category discovery Issues related to Discovery Category enhancement New feature or request
#1065 opened Apr 26, 2024 by zschmerber
1
Support linting of enum and sibling conventions metaschema
#1061 opened Apr 24, 2024 by dkolbly
Add Package object to Product enhancement New feature or request
#1053 opened Apr 19, 2024 by zschmerber
@zschmerber
1
TCP Flags should be directional network_activity Issues related to Network Activity Category
#1033 opened Apr 10, 2024 by arunj18
8
ProTip! Adding no:label will show everything without a label.