Search results

Missing discovery_result class in API

Status: Open.

#1547 In ocsf/ocsf-schema;

· PR0CK0 opened on Dec 16, 2025

More generic "compute enviornment" object.

v2.0 and laterChanges marked for v2.0 of OCSF, due to their breaking natureChanges marked for v2.0 of OCSF, due to their breaking nature

Status: Open.

#1545 In ocsf/ocsf-schema;

· hmadison opened on Dec 9, 2025

How do we want to handle list element names?

v2.0 and laterChanges marked for v2.0 of OCSF, due to their breaking natureChanges marked for v2.0 of OCSF, due to their breaking nature

Status: Open.

#1544 In ocsf/ocsf-schema;

· hmadison opened on Dec 9, 2025

event_code and event_name

enhancementNew feature or requestNew feature or request

v1.8.0PRs, Issues that will be considered for v1.8.0PRs, Issues that will be considered for v1.8.0

Status: Open.

#1543 In ocsf/ocsf-schema;

· send2stephy opened on Dec 9, 2025

[Proposal] Extending <code>Network Activity</code> category with raw packet data

enhancementNew feature or requestNew feature or request

network_activityIssues related to Network Activity CategoryIssues related to Network Activity Category

Status: Open.

#1523 In ocsf/ocsf-schema;

· s-Fl opened on Oct 31, 2025

Proposed attribute addition to the Authentication Class

Status: Open.

#1519 In ocsf/ocsf-schema;

· send2stephy opened on Oct 28, 2025

[Proposal] Industrial Control System (ICS) Field Extensions

enhancementNew feature or requestNew feature or request

network_activityIssues related to Network Activity CategoryIssues related to Network Activity Category

Status: Open.

#1515 In ocsf/ocsf-schema;

· JW-Corelight opened on Oct 16, 2025

[Proposal] Reverse Mapping for Legal/Audit Compliance

enhancementNew feature or requestNew feature or request

frameworkStructures, conventions, requirements, data types, etc.Structures, conventions, requirements, data types, etc.

Status: Open.

#1514 In ocsf/ocsf-schema;

· JW-Corelight opened on Oct 16, 2025

Need for a certificate validation activity_id and OCSP protocol in Authentication, or a separate class

iamIssues related to Identity & Access Management CategoryIssues related to Identity & Access Management Category

questionFurther information is requestedFurther information is requested

Status: Open.

#1513 In ocsf/ocsf-schema;

· pagbabian-splunk opened on Oct 15, 2025

Key Missing Fields for Web Traffic Logs - TLS Inspection Status

Status: Open.

#1508 In ocsf/ocsf-schema;

· SimSama opened on Oct 9, 2025

http_response and api.response missing UID

v1.7.0

Status: Open.

Feature

#1499 In ocsf/ocsf-schema;

· zschmerber opened on Oct 1, 2025

Some changelog entries are being added to the wrong version

grammar_consistencyIssues related to the attribute grammar consistency work-streamIssues related to the attribute grammar consistency work-stream

v1.5.0Items to be considered for OCSF v1.5.0Items to be considered for OCSF v1.5.0

v1.6.0Items to be considered for OCSF v1.6.0Items to be considered for OCSF v1.6.0

v1.7.0

v1.8.0PRs, Issues that will be considered for v1.8.0PRs, Issues that will be considered for v1.8.0

Status: Open.

#1496 In ocsf/ocsf-schema;

· eric-seppanen opened on Sep 30, 2025