ocsf / ocsf-schema

OCSF Schema
Apache License 2.0
617 stars 130 forks source link

Fixed patch_state profile construction; Removed requirement overrides from _resource. #1087

Closed pagbabian-splunk closed 4 months ago

pagbabian-splunk commented 4 months ago

Related Issue: #1086, #1075

Description of changes:

Attributes in a constraint should be recommended, not optional. _resource was overriding the _entity requirements to optional. This bug fix removes the override.

The patch_state Discovery event class was registered with the Host profile, but not including the profiles/host.json attributes. The built-in device attribute needed a "profile": null statement in its clause.