Skip to content

Issues: ocsf/ocsf-schema

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

61 Open 305 Closed
61 Open 305 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

vendor_attributes missing Group in Incident Finding bug Something isn't working v1.4.0 Changes marked for the upcoming version 1.4.0
#1318 opened Jan 15, 2025 by pagbabian-splunk
@floydtree
OSINT profile improvements enhancement New feature or request v1.5.0 or later
#1309 opened Jan 9, 2025 by PavelJurka
The Discovery category has too many narrow, but related classes. enhancement New feature or request v1.5.0 or later
#1261 opened Nov 21, 2024 by pagbabian-splunk
Network packet schema
#1240 opened Nov 2, 2024 by mosajjal
3
Proposal: Extend Security Control Profile for Authentication Class in OCSF v1.5.0 or later
#1235 opened Oct 31, 2024 by pladamgregory
2
Proposal: Expanded Application Lifecycle Schema (Class 6002)
#1234 opened Oct 31, 2024 by pladamgregory
7
Create a slim version of the ocsf-schema
#1223 opened Oct 28, 2024 by nadidsky
Support the ability to promote extensions to core without breaking changes
#1217 opened Oct 22, 2024 by alanisaac
Enum reuse
#1214 opened Oct 21, 2024 by alanisaac
4
New Ontology anchor metaschema
#1218 opened Oct 18, 2024 by netfl0
2
Clarification on Proper Placement of Parent Process Details in Process Event (ACTOR vs PROCESS.PARENT)
#1187 opened Oct 1, 2024 by threatdecoder
Proposals for shared files attributes to File object
#1186 opened Sep 29, 2024 by erikloman
Where to store IP addresses in Network Connection Info object?
#1183 opened Sep 25, 2024 by jedmitten
1
How do I model a detection?
#1177 opened Sep 13, 2024 by pagbabian-splunk
8
Missing relation fields in application lifecycle
#1161 opened Aug 20, 2024 by andurin
Activity class required to represent script execution events
#1156 opened Aug 13, 2024 by davemcatcisco
3
digital_signature name mismatch between objects and dictionary.json grammar_consistency Issues related to the attribute grammar consistency work-stream
#1151 opened Jul 29, 2024 by medallium
2
Enrichment extension
#1148 opened Jul 22, 2024 by PavelJurka
Kubernetes extension - the initial shape
#1131 opened Jul 1, 2024 by PavelJurka
USER, LDAP Person extension by useful fields + cloud profile added to support Azure AD v1.5.0 or later
#1122 opened Jun 26, 2024 by PavelJurka
1
The Job object cannot adequately describe Windows scheduled jobs
#1118 opened Jun 21, 2024 by davemcatcisco
Mapping for mailbox rule events
#1112 opened Jun 13, 2024 by eliraz-levi
3
Extend compliance by Compliance references KB Articles and Compliance standards KB Articles
#1109 opened Jun 11, 2024 by PavelJurka
User should have an array of Account objects
#1107 opened Jun 4, 2024 by sonnens
User object should include an Enabled / Disabled state.
#1106 opened Jun 4, 2024 by pagbabian-splunk
1
ProTip! Follow long discussions with comments:>50.