https://github.com/ocsf/ocsf-schema?utm_source=awesome-jsonschema

OCSF Schema
https://github.com/ocsf/ocsf-schema?utm_source=awesome-jsonschema

List: ocsf-schema?utm_source=awesome-jsonschema

Last synced: 25 days ago
JSON representation

OCSF Schema

• Host: GitHub
• URL: https://github.com/ocsf/ocsf-schema?utm_source=awesome-jsonschema
• Owner: ocsf
• License: apache-2.0
• Created: 2022-04-16T04:55:08.000Z (about 2 years ago)
• Default Branch: main
• Last Pushed: 2024-06-04T01:22:11.000Z (28 days ago)
• Last Synced: 2024-06-04T02:59:34.783Z (28 days ago)
• Size: 2.9 MB
• Stars: 564
• Watchers: 23
• Forks: 112
• Open Issues: 58
• Metadata Files:
  • Readme: README.md
  • Changelog: CHANGELOG.md
  • Contributing: CONTRIBUTING.md
  • License: LICENSE
  • Codeowners: .github/CODEOWNERS

Lists

• awesome-jsonschema - OCSF Schemas - This repository defines the Open Cybersecurity Schema Framework (OCSF) schema. OCSF is a framework for creating schemas and it also delivers a cybersecurity event schema built with the framework. (Registries)

README

        
#  Open Cybersecurity Schema Framework

This repository defines the Open Cybersecurity Schema Framework (OCSF) schema.

OCSF is a framework for creating schemas and it also delivers a cybersecurity

event schema built with the framework.

The framework is made up of a set of categories, event classes, data types,

and an attribute dictionary. The framework is not restricted to cybersecurity

nor to events, however the initial focus of the framework has been a schema

for cybersecurity events. A schema browser for the cybersecurity schema can

be found at [schema.ocsf.io](https://schema.ocsf.io). This is the recommended

way to explore the schema.

OCSF is agnostic to storage format, data collection and ETL processes. The core

schema for cybersecurity events is intended to be agnostic to implementations.

The schema framework definition files and the resulting schema are written as JSON.

OCSF is intended to be used by both products and devices which produce log events,

analytic systems, and logging systems which retain log events.

For more information about concepts in OCSF, please refer to the OCSF White paper, [Understanding OCSF](https://github.com/ocsf/ocsf-docs/blob/main/Understanding%20OCSF.pdf).

Looking to contribute? Please refer to the contribution guide,

[CONTRIBUTING.md](https://github.com/ocsf/ocsf-schema/blob/main/CONTRIBUTING.md).

## Versioning

Updates to OCSF follow [semantic versioning](https://semver.org/).

## License

This software is licensed under the [Apache License](https://github.com/ocsf/ocsf-schema/blob/main/LICENSE), version 2 ("ALv2").