-
Notifications
You must be signed in to change notification settings - Fork 187
Pull requests: ocsf/ocsf-schema
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Generalize file_hash_t by removing regex
breaking
Any breaking, non backwards compatible changes
framework
Structures, conventions, requirements, data types, etc.
maintainers
Issues that require attention from all maintainers
v1.8.0
PRs, Issues that will be considered for v1.8.0
#1564
opened Jan 24, 2026 by
rmouritzen-splunk
Loading…
Issue 1556: Add
fingerprints object support to network_endpoint
#1560
opened Jan 21, 2026 by
Aniak5
Loading…
Add application-layer protocol to Network Base Event
network_activity
Issues related to Network Activity Category
non_breaking
Non Breaking, backwards compatible changes
#1557
opened Jan 14, 2026 by
Aniak5
Loading…
Extending Network Activity category with raw packet data
network_activity
Issues related to Network Activity Category
v1.8.0
PRs, Issues that will be considered for v1.8.0
#1549
opened Dec 25, 2025 by
s-Fl
Loading…
Add User Sessions Profile and apply it to Evidence object
application_activity
Issues related to Application Activity Category
discovery
Issues related to Discovery Category
findings
Issues related to Findings Category
system_activity
Issues related to System Activity Category
v1.8.0
PRs, Issues that will be considered for v1.8.0
#1540
opened Nov 25, 2025 by
aman-chauhan-cs
Loading…
Issue 1422: Add euid and egid macOS attributes to process object
system_activity
Issues related to System Activity Category
v1.8.0
PRs, Issues that will be considered for v1.8.0
#1538
opened Nov 19, 2025 by
rmouritzen-splunk
•
Draft
Track how long events spend in queue via queued_duration.
v1.8.0
PRs, Issues that will be considered for v1.8.0
#1536
opened Nov 17, 2025 by
hmadison
Loading…
Add GPU Information Object to OCSF Device Hardware Information Schema
discovery
Issues related to Discovery Category
enhancement
New feature or request
v1.8.0
PRs, Issues that will be considered for v1.8.0
#1527
opened Nov 4, 2025 by
jasonbreimer
Loading…
Proposed attribute addition (resource_details/group) to the Authentication Class
v1.8.0
PRs, Issues that will be considered for v1.8.0
#1521
opened Oct 28, 2025 by
send2stephy
•
Draft
Added department to ldap_person and is_on_premises_sync_enabled to account
enhancement
New feature or request
iam
Issues related to Identity & Access Management Category
v1.8.0
PRs, Issues that will be considered for v1.8.0
Added an observability metric event to the discovery category.
OpenTelemetry
pull requests related to OpenTelemetry
v1.8.0
PRs, Issues that will be considered for v1.8.0
#1442
opened Jun 3, 2025 by
hmadison
Loading…
Add API Token (PRs, Issues that will be considered for v1.8.0
token) Object to API
v1.8.0
#1429
opened May 16, 2025 by
jonrau-at-queryai
•
Draft
Add a new meta schema keyword: family, to group related classes in a category
enhancement
New feature or request
framework
Structures, conventions, requirements, data types, etc.
metaschema
non_breaking
Non Breaking, backwards compatible changes
#1334
opened Feb 4, 2025 by
pagbabian-splunk
•
Draft
ProTip!
Exclude everything labeled
bug with -label:bug.