Voozh

VOOZH

URL: https://schema.ocsf.io/1.3.0/profiles/host

⇱ Open Cybersecurity Schema Framework

Host [host] Profile

The attributes that identify host/device attributes.

Name	Caption	Group	Requirement	Type	Description
actor	Actor	primary	Optional	Actor	The actor object describes details about the user/role/process that was the source of the activity.
device	Device ^O	primary	Recommended	Device	An addressable device, computer system or host.

Account Change Class

Admin Group Query Class

Application Lifecycle Class

Authentication Class

Authorize Session Class

Compliance Finding Class

DHCP Activity Class

DNS Activity Class

Data Security Finding Class

Detection Finding Class

Device Config State Class

Device Config State Change Class

Device Inventory Info Class

Email Activity Class

Email File Activity Class

Email URL Activity Class

Entity Management Class

Event Log Activity Class

FTP Activity Class

File Query Class

File Remediation Activity Class

File System Activity Class

Folder Query Class

Group Management Class

HTTP Activity Class

Job Query Class

Kernel Activity Class

Kernel Extension Activity Class

Kernel Object Query Class

Memory Activity Class

Module Activity Class

Module Query Class

NTP Activity Class

Network Activity Class

Network Connection Query Class

Network File Activity Class ^D

Network Remediation Activity Class

Networks Query Class

Operating System Patch State Class

Peripheral Device Query Class

Prefetch Query Class

Process Activity Class

Process Query Class

Process Remediation Activity Class

RDP Activity Class

Registry Key Activity Class

Registry Key Query Class

Registry Value Activity Class

Registry Value Query Class

Remediation Activity Class

SMB Activity Class

SSH Activity Class

Scan Activity Class

Scheduled Job Activity Class

Service Query Class

Software Inventory Info Class

Tunnel Activity Class

User Access Management Class

User Query Class

User Session Query Class

Vulnerability Finding Class

Web Resource Access Activity Class ^D

Web Resources Activity Class

Windows Resource Activity Class

Windows Service Activity Class

OCSF Server version 3.1.0. Copyright © OCSF a Series of LF Projects, LLC. For web site terms of use, trademark policy and other project policies please see LF Projects, LLC. This content includes the ICD Schema developed by Symantec, a division of Broadcom.