search

ocsf / ocsf-schema

OCSF Schema
Apache License 2.0
582 stars 118 forks source link

Create storage bucket.json #1085

Closed vabmalikusa closed 5 days ago

vabmalikusa commented 1 month ago

Related Issue:

Description of changes:

Delete once you have confirmed the following:

  1. Did you add a single line summary of changes to Unreleased section in the CHANGELOG.md file?
  2. Have you followed the contribution guidelines?
  3. Did you run a local instance of the ocsf-server and ensure it ran without any errors/warnings?
  4. Is your PR title in sync with the description?
pagbabian-splunk commented 1 month ago

Also take a look at the Datastore Activity class in the Application category. There is a databucket object as part of that class. https://schema.ocsf.io/1.3.0-dev/objects/databucket?extensions=

davemcatcisco commented 1 month ago

It's clear from the attributes in the storage_bucket object that the type of storage bucket being referred to is an S3 bucket or similar, i.e. the cloud-specific meaning of the term. However, the term storage bucket has a more general meaning in software engineering that probably predates the cloud-specific meaning by a couple of decades. Because the OCSF schema covers a very broad range of applications and operating contexts, I feel that OCSF event classes and objects shouldn't use a general term in a way that precludes other meanings and interpretations.

My request therefore is that you change: