Palo Alto Networks · JSON-LD Context
Palo Alto Cortex Xdr Api Context
JSON-LD context defining the semantic vocabulary for Palo Alto Cortex Xdr Api from Palo Alto Networks.
7 Classes
66 Properties
4 Namespaces
Namespaces
pan:
https://pan.dev/schema/
schema:
https://schema.org/
dcterms:
http://purl.org/dc/terms/
xsd:
http://www.w3.org/2001/XMLSchema#
Classes
Alert
AuditLog
Endpoint
Filter
Incident
SortOrder
value
Properties
| Property | Type | Container |
|---|---|---|
| action | string | |
| actionPretty | string | |
| activeDirectory | string | |
| actorEmail | string | |
| actorPrimaryUsername | string | |
| actorType | string | |
| alertCount | integer | |
| alertId | string | |
| alertType | string | |
| alias | string | |
| assignedUserMail | string | |
| assignedUserPrettyName | string | |
| category | string | |
| contentVersion | string | |
| creationTime | integer | |
| criticalSeverityAlertCount | integer | |
| description | string | |
| detectionTime | integer | |
| detectionTimestamp | integer | |
| domain | string | |
| endpointId | string | |
| endpointName | string | |
| endpointStatus | string | |
| endpointType | string | |
| endpointVersion | string | |
| field | string | |
| firstSeen | integer | |
| groupName | string | set |
| highSeverityAlertCount | integer | |
| hostCount | integer | |
| hostIp | string | set |
| hostName | string | |
| incidentId | string | |
| incidentName | string | |
| installDate | integer | |
| installationPackage | string | |
| ip | string | |
| isIsolated | string | |
| isolationReason | string | |
| keyword | string | |
| lastSeen | integer | |
| lowSeverityAlertCount | integer | |
| mac | string | set |
| manualScore | integer | |
| matchingStatus | string | |
| medSeverityAlertCount | integer | |
| modificationTime | integer | |
| name | string | |
| operator | string | |
| osType | string | |
| reason | string | |
| resolutionComment | string | |
| resolutionStatus | string | |
| result | string | |
| ruleBasedScore | integer | |
| scanStatus | string | |
| severity | string | |
| source | string | |
| starred | boolean | |
| status | string | |
| subType | string | |
| timestamp | integer | |
| userCount | integer | |
| userName | string | |
| users | string | set |
| xdrUrl | string |
JSON-LD Document
{
"@context": {
"@version": 1.1,
"pan": "https://pan.dev/schema/",
"schema": "https://schema.org/",
"dcterms": "http://purl.org/dc/terms/",
"xsd": "http://www.w3.org/2001/XMLSchema#",
"Alert": "pan:Alert",
"AuditLog": "pan:AuditLog",
"Endpoint": "pan:Endpoint",
"Filter": "pan:Filter",
"Incident": "pan:Incident",
"SortOrder": "pan:SortOrder",
"action": {
"@id": "pan:action",
"@type": "xsd:string"
},
"actionPretty": {
"@id": "pan:action_pretty",
"@type": "xsd:string"
},
"activeDirectory": {
"@id": "pan:active_directory",
"@type": "xsd:string"
},
"actorEmail": {
"@id": "pan:actor_email",
"@type": "xsd:string"
},
"actorPrimaryUsername": {
"@id": "pan:actor_primary_username",
"@type": "xsd:string"
},
"actorType": {
"@id": "pan:actor_type",
"@type": "xsd:string"
},
"alertCount": {
"@id": "pan:alert_count",
"@type": "xsd:integer"
},
"alertId": {
"@id": "pan:alert_id",
"@type": "xsd:string"
},
"alertType": {
"@id": "pan:alert_type",
"@type": "xsd:string"
},
"alias": {
"@id": "pan:alias",
"@type": "xsd:string"
},
"assignedUserMail": {
"@id": "pan:assigned_user_mail",
"@type": "xsd:string"
},
"assignedUserPrettyName": {
"@id": "pan:assigned_user_pretty_name",
"@type": "xsd:string"
},
"category": {
"@id": "pan:category",
"@type": "xsd:string"
},
"contentVersion": {
"@id": "pan:content_version",
"@type": "xsd:string"
},
"creationTime": {
"@id": "schema:dateCreated",
"@type": "xsd:integer"
},
"criticalSeverityAlertCount": {
"@id": "pan:critical_severity_alert_count",
"@type": "xsd:integer"
},
"description": {
"@id": "schema:description",
"@type": "xsd:string"
},
"detectionTime": {
"@id": "pan:detection_time",
"@type": "xsd:integer"
},
"detectionTimestamp": {
"@id": "pan:detection_timestamp",
"@type": "xsd:integer"
},
"domain": {
"@id": "pan:domain",
"@type": "xsd:string"
},
"endpointId": {
"@id": "pan:endpoint_id",
"@type": "xsd:string"
},
"endpointName": {
"@id": "pan:endpoint_name",
"@type": "xsd:string"
},
"endpointStatus": {
"@id": "pan:endpoint_status",
"@type": "xsd:string"
},
"endpointType": {
"@id": "pan:endpoint_type",
"@type": "xsd:string"
},
"endpointVersion": {
"@id": "pan:endpoint_version",
"@type": "xsd:string"
},
"field": {
"@id": "pan:field",
"@type": "xsd:string"
},
"firstSeen": {
"@id": "pan:first_seen",
"@type": "xsd:integer"
},
"groupName": {
"@id": "pan:group_name",
"@container": "@set",
"@type": "xsd:string"
},
"highSeverityAlertCount": {
"@id": "pan:high_severity_alert_count",
"@type": "xsd:integer"
},
"hostCount": {
"@id": "pan:host_count",
"@type": "xsd:integer"
},
"hostIp": {
"@id": "pan:host_ip",
"@container": "@set",
"@type": "xsd:string"
},
"hostName": {
"@id": "pan:host_name",
"@type": "xsd:string"
},
"incidentId": {
"@id": "pan:incident_id",
"@type": "xsd:string"
},
"incidentName": {
"@id": "pan:incident_name",
"@type": "xsd:string"
},
"installDate": {
"@id": "pan:install_date",
"@type": "xsd:integer"
},
"installationPackage": {
"@id": "pan:installation_package",
"@type": "xsd:string"
},
"ip": {
"@id": "pan:ip",
"@type": "xsd:string"
},
"isIsolated": {
"@id": "pan:is_isolated",
"@type": "xsd:string"
},
"isolationReason": {
"@id": "pan:isolation_reason",
"@type": "xsd:string"
},
"keyword": {
"@id": "pan:keyword",
"@type": "xsd:string"
},
"lastSeen": {
"@id": "pan:last_seen",
"@type": "xsd:integer"
},
"lowSeverityAlertCount": {
"@id": "pan:low_severity_alert_count",
"@type": "xsd:integer"
},
"mac": {
"@id": "pan:mac",
"@container": "@set",
"@type": "xsd:string"
},
"manualScore": {
"@id": "pan:manual_score",
"@type": "xsd:integer"
},
"matchingStatus": {
"@id": "pan:matching_status",
"@type": "xsd:string"
},
"medSeverityAlertCount": {
"@id": "pan:med_severity_alert_count",
"@type": "xsd:integer"
},
"modificationTime": {
"@id": "schema:dateModified",
"@type": "xsd:integer"
},
"name": {
"@id": "schema:name",
"@type": "xsd:string"
},
"operator": {
"@id": "pan:operator",
"@type": "xsd:string"
},
"osType": {
"@id": "pan:os_type",
"@type": "xsd:string"
},
"reason": {
"@id": "pan:reason",
"@type": "xsd:string"
},
"resolutionComment": {
"@id": "pan:resolution_comment",
"@type": "xsd:string"
},
"resolutionStatus": {
"@id": "pan:resolution_status",
"@type": "xsd:string"
},
"result": {
"@id": "pan:result",
"@type": "xsd:string"
},
"ruleBasedScore": {
"@id": "pan:rule_based_score",
"@type": "xsd:integer"
},
"scanStatus": {
"@id": "pan:scan_status",
"@type": "xsd:string"
},
"severity": {
"@id": "pan:severity",
"@type": "xsd:string"
},
"source": {
"@id": "pan:source",
"@type": "xsd:string"
},
"starred": {
"@id": "pan:starred",
"@type": "xsd:boolean"
},
"status": {
"@id": "pan:status",
"@type": "xsd:string"
},
"subType": {
"@id": "pan:sub_type",
"@type": "xsd:string"
},
"timestamp": {
"@id": "pan:timestamp",
"@type": "xsd:integer"
},
"userCount": {
"@id": "pan:user_count",
"@type": "xsd:integer"
},
"userName": {
"@id": "pan:user_name",
"@type": "xsd:string"
},
"users": {
"@id": "pan:users",
"@container": "@set",
"@type": "xsd:string"
},
"value": "pan:value",
"xdrUrl": {
"@id": "pan:xdr_url",
"@type": "xsd:string"
}
}
}