VOOZH about

URL: https://schema.ocsf.io/1.3.0/objects/session

⇱ Open Cybersecurity Schema Framework

Session Object
Applicable Profiles: Date/Time

The Session object describes details about an authenticated session. e.g. Session Creation Time, Session Issuer. Defined by D3FEND d3f:Session.
Name Caption Requirement Type Description
count Count Optional Integer The number of identical sessions spawned from the same source IP, destination IP, application, and content/threat type seen over a period of time.
created_time Created Time Recommended Timestamp The time when the session was created.
created_time_dt Created Time Optional Datetime The time when the session was created.
credential_uid User Credential ID O Optional String The unique identifier of the user's credential. For example, AWS Access Key ID.
expiration_reason Expiration Reason Optional String The reason which triggered the session expiration.
expiration_time Expiration Time Optional Timestamp The session expiration time.
expiration_time_dt Expiration Time Optional Datetime The session expiration time.
is_mfa Multi Factor Authentication Optional Boolean Indicates whether Multi Factor Authentication was used during authentication.
is_remote Remote Recommended Boolean The indication of whether the session is remote.
is_vpn VPN Session Optional Boolean The indication of whether the session is a VPN session.
issuer Issuer Details Recommended String The identifier of the session issuer.
terminal Terminal Optional String The Pseudo Terminal associated with the session. Ex: the tty or pts value.
uid Unique ID Recommended String The unique identifier of the session.
uid_alt Alternate ID Optional String The alternate unique identifier of the session. e.g. AWS ARN - arn:aws:sts::123344444444:assumed-role/Admin/example-session.
uuid UUID Optional UUID The universally unique identifier of the session.
OCSF Server version 3.1.0. Copyright © OCSF a Series of LF Projects, LLC. For web site terms of use, trademark policy and other project policies please see LF Projects, LLC. This content includes the ICD Schema developed by Symantec, a division of Broadcom.