Enhance Managed Entity - Githubissues

ocsf / ocsf-schema

OCSF Schema

Apache License 2.0

617 stars 130 forks source link

Enhance Managed Entity #1094

Closed pagbabian-splunk closed 4 months ago

pagbabian-splunk commented 4 months ago

Related Issue: N/A

Managed Entity was too open ended, without enough detail on the changes to an arbitrary entity as a string value in type. This PR adds specific object entities.

Description of changes:

Added type_id (along with existing type as sibling) with an initial set of types: Device, User, Group, Organization, Policy. Added to the constraints as at_least_one

mikeradka commented 4 months ago

Looks pretty good to me. Once it is out of draft, I would be willing to re-review and approve.