Skip to content

Issues: ocsf/ocsf-schema

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

64 Open 302 Closed
64 Open 302 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Impact requirement is inconsistent in the Findings classes: Impact attributes should be included in Incident profile. description_updates Issues related to missing/incorrect/lacking descriptions of attributes findings Issues related to Findings Category grammar_consistency Issues related to the attribute grammar consistency work-stream non_breaking Non Breaking, backwards compatible changes v1.4.0 Changes marked for the upcoming version 1.4.0 v1.5.0 or later
#1319 opened Jan 15, 2025 by pagbabian-splunk
vendor_attributes missing Group in Incident Finding bug Something isn't working v1.4.0 Changes marked for the upcoming version 1.4.0
#1318 opened Jan 15, 2025 by pagbabian-splunk
Add missing Zeek logs to network activity class network_activity Issues related to Network Activity Category non_breaking Non Breaking, backwards compatible changes
#1314 opened Jan 14, 2025 by Aniak5
@Aniak5
OSINT profile improvements enhancement New feature or request v1.5.0 or later
#1309 opened Jan 9, 2025 by PavelJurka
Update Email event class to be generic breaking Any breaking, non backwards compatible changes network_activity Issues related to Network Activity Category
#1306 opened Jan 8, 2025 by Aniak5
@Aniak5
The Discovery category has too many narrow, but related classes. enhancement New feature or request v1.5.0 or later
#1261 opened Nov 21, 2024 by pagbabian-splunk
Network packet schema
#1240 opened Nov 2, 2024 by mosajjal
3
Proposal: Extend Security Control Profile for Authentication Class in OCSF v1.5.0 or later
#1235 opened Oct 31, 2024 by pladamgregory
2
Proposal: Expanded Application Lifecycle Schema (Class 6002)
#1234 opened Oct 31, 2024 by pladamgregory
7
Create a slim version of the ocsf-schema
#1223 opened Oct 28, 2024 by nadidsky
Support the ability to promote extensions to core without breaking changes
#1217 opened Oct 22, 2024 by alanisaac
Enum reuse
#1214 opened Oct 21, 2024 by alanisaac
4
New Ontology anchor metaschema
#1218 opened Oct 18, 2024 by netfl0
2
Clarification on Proper Placement of Parent Process Details in Process Event (ACTOR vs PROCESS.PARENT)
#1187 opened Oct 1, 2024 by threatdecoder
Proposals for shared files attributes to File object
#1186 opened Sep 29, 2024 by erikloman
Where to store IP addresses in Network Connection Info object?
#1183 opened Sep 25, 2024 by jedmitten
1
How do I model a detection?
#1177 opened Sep 13, 2024 by pagbabian-splunk
8
Missing relation fields in application lifecycle
#1161 opened Aug 20, 2024 by andurin
Activity class required to represent script execution events
#1156 opened Aug 13, 2024 by davemcatcisco
3
digital_signature name mismatch between objects and dictionary.json grammar_consistency Issues related to the attribute grammar consistency work-stream
#1151 opened Jul 29, 2024 by medallium
2
Enrichment extension
#1148 opened Jul 22, 2024 by PavelJurka
Kubernetes extension - the initial shape
#1131 opened Jul 1, 2024 by PavelJurka
USER, LDAP Person extension by useful fields + cloud profile added to support Azure AD v1.5.0 or later
#1122 opened Jun 26, 2024 by PavelJurka
1
The Job object cannot adequately describe Windows scheduled jobs
#1118 opened Jun 21, 2024 by davemcatcisco
Mapping for mailbox rule events
#1112 opened Jun 13, 2024 by eliraz-levi
3
ProTip! What’s not been updated in a month: updated:<2024-12-19.