- Print
- DarkLight
Article summary
Did you find this summary helpful?
Thank you for your feedback
Caption | Name | Requirement | Type | Description |
---|---|---|---|---|
Application Owner | end_time | optional | :ref:`timestamp_t <timestamp_t>` | | Derived from OCSF ApplicationLifecycle.app.owner. ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.owner: The owner of the product. Typically this is the user responsible for the application internal to the organization. |
Key | key | required | :ref:`string_t <string_t>` | | CDPs generated type of owner information derived from User, e.g., BU_OWNER_ID. |
Record Created At | record_created_at | required | :ref:`timestamp_t <timestamp_t>` | | CDPs generated timestamp when record was created. |
Record Updated At | record_updated_at | required | :ref:`timestamp_t <timestamp_t>` | | CDPs generated timestamp when record was last updated. |
Application Vendor Name/Application Version/Application Name/Application Unique ID | application_id | required | :ref:`integer_t <integer_t>` | | Derived from CORE_DATA SoftwareApplication.id. SoftwareApplication.id: Derived from OCSF ApplicationLifecycle.app.vendor_name and OCSF ApplicationLifecycle.app.version and OCSF ApplicationLifecycle.app.name and OCSF ApplicationLifecycle.app.uid. ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.vendor_name: The name of the vendor of the product. ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.version: The version of the product, as defined by the event source. For example: ``2013.1.3-beta``. ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.name: The name of the product. ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.uid: The unique identifier of the product. |
Application Owner | source | optional | :ref:`string_t <string_t>` | | Derived from OCSF ApplicationLifecycle.app.owner. ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.owner: The owner of the product. Typically this is the user responsible for the application internal to the organization. |
Application Owner | start_time | optional | :ref:`timestamp_t <timestamp_t>` | | Derived from OCSF ApplicationLifecycle.app.owner. ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.owner: The owner of the product. Typically this is the user responsible for the application internal to the organization. |
Application Owner | value | required | :ref:`string_t <string_t>` | | Derived from OCSF ApplicationLifecycle.app.owner. ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.owner: The owner of the product. Typically this is the user responsible for the application internal to the organization. |
Was this article helpful?