Skip to content

Issues: ocsf/ocsf-schema

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

66 Open 292 Closed
66 Open 292 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Add File Access Check class enhancement New feature or request non_breaking Non Breaking, backwards compatible changes system_activity Issues related to System Activity Category v1.4.0 or later Changes marked for versions beyond v1.3.0 of OCSF
#1296 opened Dec 23, 2024 by rmouritzen-splunk
@rmouritzen-splunk
Add a generic event class for each category enhancement New feature or request non_breaking Non Breaking, backwards compatible changes v1.4.0 or later Changes marked for versions beyond v1.3.0 of OCSF
#1294 opened Dec 23, 2024 by rmouritzen-splunk
@rmouritzen-splunk
Add url attribute to file object enhancement New feature or request non_breaking Non Breaking, backwards compatible changes v1.4.0 or later Changes marked for versions beyond v1.3.0 of OCSF
#1291 opened Dec 18, 2024 by rmouritzen-splunk
@rmouritzen-splunk
1
Add Application Error event class application_activity Issues related to Application Activity Category enhancement New feature or request non_breaking Non Breaking, backwards compatible changes
#1289 opened Dec 17, 2024 by rmouritzen-splunk
@rmouritzen-splunk
Add drive_type and drive_type_id under File Object
#1286 opened Dec 12, 2024 by 02manoj92
Add Architecture to OS
#1277 opened Dec 10, 2024 by PavelJurka
Add a new process attribute to track lineage uids
#1275 opened Dec 9, 2024 by lcostantino
The Discovery category has too many narrow, but related classes.
#1261 opened Nov 21, 2024 by pagbabian-splunk
Network packet schema
#1240 opened Nov 2, 2024 by mosajjal
3
Proposal: Extend Security Control Profile for Authentication Class in OCSF
#1235 opened Oct 31, 2024 by pladamgregory
2
Proposal: Expanded Application Lifecycle Schema (Class 6002)
#1234 opened Oct 31, 2024 by pladamgregory
7
Create a slim version of the ocsf-schema
#1223 opened Oct 28, 2024 by nadidsky
Support the ability to promote extensions to core without breaking changes
#1217 opened Oct 22, 2024 by alanisaac
Enum reuse
#1214 opened Oct 21, 2024 by alanisaac
4
New Ontology anchor metaschema
#1218 opened Oct 18, 2024 by netfl0
2
Clarification on Proper Placement of Parent Process Details in Process Event (ACTOR vs PROCESS.PARENT)
#1187 opened Oct 1, 2024 by threatdecoder
Proposals for shared files attributes to File object
#1186 opened Sep 29, 2024 by erikloman
Where to store IP addresses in Network Connection Info object?
#1183 opened Sep 25, 2024 by jedmitten
1
How do I model a detection?
#1177 opened Sep 13, 2024 by pagbabian-splunk
8
Missing relation fields in application lifecycle
#1161 opened Aug 20, 2024 by andurin
Activity class required to represent script execution events
#1156 opened Aug 13, 2024 by davemcatcisco
3
digital_signature name mismatch between objects and dictionary.json grammar_consistency Issues related to the attribute grammar consistency work-stream
#1151 opened Jul 29, 2024 by medallium
2
Enrichment extension
#1148 opened Jul 22, 2024 by PavelJurka
Kubernetes extension - the initial shape
#1131 opened Jul 1, 2024 by PavelJurka
USER, LDAP Person extension by useful fields + cloud profile added to support Azure AD v1.4.0 or later Changes marked for versions beyond v1.3.0 of OCSF
#1122 opened Jun 26, 2024 by PavelJurka
1
ProTip! Find all open issues with in progress development work with linked:pr.