-
The [Open Cybersecurity Framework (OCSF)](https://github.com/ocsf) is an event based schema that tries to categorize all types of security events in a common model. Unfortunately [their schema](https:…
-
**Current Scenario:** For the last couple of months we've struggled to incorporate OCSF mappings into our traditional integration pipeline due to the nature of the OCSF schema and how deeply nested th…
-
Our current Amazon Security Lake supports OCSF v1.0, which was the latest version of the schema when we initially shipped the integration. The OCSF schema has evolved since, and is now at v1.1.
Our …
-
**Describe what problem your feature request solves**:
The Open Cybersecurity Schema Framework ([OCSF](https://schema.ocsf.io/1.1.0/)) provides categories to organize event classes, which can be cons…
-
TLDR:
> Create a new metaschema object to support anchoring OCSF concepts in ontology. The primary goal is to enable richer and deeper programmatic integration, and ontological reasoning between the …
-
### Background
In OCSF, there are a few standard conventions for enums. Typically:
* There are two attributes that define an enum, one suffixed with `_id` that takes on an integer value, and on…
-
Will it be possible to unify the "signature" (dictionary) and "digital_signature" (object)?
The object mentions that the usage for the name should be "digital_signature", but in the dictionary.json…
-
## Feature Request
The [Open Cybersecurity Schema Framework (OCSF)](https://docs.aws.amazon.com/security-lake/latest/userguide/open-cybersecurity-schema-framework.html) is a collaborative, open-sou…
-
Support an output format for SARIF to leverage the Security tab on repos and let GitHub ingest the data. https://docs.github.com/en/code-security/code-scanning/integrating-with-code-scanning/sarif-sup…
-
Originated from `ocsf-schema` PR https://github.com/ocsf/ocsf-schema/pull/807
I believe there is an important relationship between the `observable` [datatypes](https://schema.ocsf.io/1.0.0/data_typ…