The OSSEM Project
Data Dictionaries
Introduction
Guidelines
Data Dictionary Authoring Guide
Notebooks
Correlating Windows Security Auditing
Common Data Model
Introduction
Guidelines
Entity Structure
Table Structure
Data Types
Domain vs FQDN vs Host Name Implementation
Entities
alert
any
certificate
cloud
destination
destination_nat
device
dns
etl
event
file
geo
group
hash
http
ip
kerberos
logon
mac
meta
module
network
pipe
port
process
registry
rule
source
source_nat
target
threat
tls
url
user
user_agent
Tables
network_session
Detection Model
Introduction
Relationships to Events
MITRE ATT&CK
ATT&CK Techniques to Security Events
ATT&CK DS Event Mappings
.md
.pdf
repository
open issue
suggest edit
MITRE ATT&CK
ΒΆ
Relationships to Events
ATT&CK Techniques to Security Events
