Palo Alto Networks · JSON-LD Context
Palo Alto Cortex Xsiam Api Context
JSON-LD context defining the semantic vocabulary for Palo Alto Cortex Xsiam Api from Palo Alto Networks.
8 Classes
57 Properties
4 Namespaces
Namespaces
pan:
https://pan.dev/schema/
schema:
https://schema.org/
dcterms:
http://purl.org/dc/terms/
xsd:
http://www.w3.org/2001/XMLSchema#
Classes
Alert
Asset
AuditLog
Endpoint
Filter
Incident
SortOrder
value
Properties
| Property | Type | Container |
|---|---|---|
| action | string | |
| actorEmail | string | |
| actorPrimaryUsername | string | |
| actorType | string | |
| alertCount | integer | |
| alertId | string | |
| alertType | string | |
| assetId | string | |
| assetName | string | |
| assetType | string | |
| assignedUserMail | string | |
| assignedUserPrettyName | string | |
| category | string | |
| contentVersion | string | |
| creationTime | integer | |
| description | string | |
| detectionTime | integer | |
| detectionTimestamp | integer | |
| domain | string | |
| endpointId | string | |
| endpointName | string | |
| endpointStatus | string | |
| endpointType | string | |
| endpointVersion | string | |
| field | string | |
| firstSeen | integer | |
| hostName | string | |
| incidentId | string | |
| incidentName | string | |
| ip | string | |
| ipAddresses | string | set |
| isIsolated | string | |
| keyword | string | |
| lastSeen | integer | |
| mitreTacticsIdsAndNames | string | set |
| mitreTechniquesIdsAndNames | string | set |
| modificationTime | integer | |
| name | string | |
| operatingSystem | string | |
| operator | string | |
| osType | string | |
| reason | string | |
| resolutionStatus | string | |
| result | string | |
| riskScore | decimal | |
| scanStatus | string | |
| severity | string | |
| source | string | |
| sources | string | set |
| starred | boolean | |
| status | string | |
| subType | string | |
| tags | string | set |
| timestamp | integer | |
| userName | string | |
| users | string | set |
| xdrUrl | string |
JSON-LD Document
{
"@context": {
"@version": 1.1,
"pan": "https://pan.dev/schema/",
"schema": "https://schema.org/",
"dcterms": "http://purl.org/dc/terms/",
"xsd": "http://www.w3.org/2001/XMLSchema#",
"Alert": "pan:Alert",
"Asset": "pan:Asset",
"AuditLog": "pan:AuditLog",
"Endpoint": "pan:Endpoint",
"Filter": "pan:Filter",
"Incident": "pan:Incident",
"SortOrder": "pan:SortOrder",
"action": {
"@id": "pan:action",
"@type": "xsd:string"
},
"actorEmail": {
"@id": "pan:actor_email",
"@type": "xsd:string"
},
"actorPrimaryUsername": {
"@id": "pan:actor_primary_username",
"@type": "xsd:string"
},
"actorType": {
"@id": "pan:actor_type",
"@type": "xsd:string"
},
"alertCount": {
"@id": "pan:alert_count",
"@type": "xsd:integer"
},
"alertId": {
"@id": "pan:alert_id",
"@type": "xsd:string"
},
"alertType": {
"@id": "pan:alert_type",
"@type": "xsd:string"
},
"assetId": {
"@id": "pan:asset_id",
"@type": "xsd:string"
},
"assetName": {
"@id": "pan:asset_name",
"@type": "xsd:string"
},
"assetType": {
"@id": "pan:asset_type",
"@type": "xsd:string"
},
"assignedUserMail": {
"@id": "pan:assigned_user_mail",
"@type": "xsd:string"
},
"assignedUserPrettyName": {
"@id": "pan:assigned_user_pretty_name",
"@type": "xsd:string"
},
"category": {
"@id": "pan:category",
"@type": "xsd:string"
},
"contentVersion": {
"@id": "pan:content_version",
"@type": "xsd:string"
},
"creationTime": {
"@id": "schema:dateCreated",
"@type": "xsd:integer"
},
"description": {
"@id": "schema:description",
"@type": "xsd:string"
},
"detectionTime": {
"@id": "pan:detection_time",
"@type": "xsd:integer"
},
"detectionTimestamp": {
"@id": "pan:detection_timestamp",
"@type": "xsd:integer"
},
"domain": {
"@id": "pan:domain",
"@type": "xsd:string"
},
"endpointId": {
"@id": "pan:endpoint_id",
"@type": "xsd:string"
},
"endpointName": {
"@id": "pan:endpoint_name",
"@type": "xsd:string"
},
"endpointStatus": {
"@id": "pan:endpoint_status",
"@type": "xsd:string"
},
"endpointType": {
"@id": "pan:endpoint_type",
"@type": "xsd:string"
},
"endpointVersion": {
"@id": "pan:endpoint_version",
"@type": "xsd:string"
},
"field": {
"@id": "pan:field",
"@type": "xsd:string"
},
"firstSeen": {
"@id": "pan:first_seen",
"@type": "xsd:integer"
},
"hostName": {
"@id": "pan:host_name",
"@type": "xsd:string"
},
"incidentId": {
"@id": "pan:incident_id",
"@type": "xsd:string"
},
"incidentName": {
"@id": "pan:incident_name",
"@type": "xsd:string"
},
"ip": {
"@id": "pan:ip",
"@type": "xsd:string"
},
"ipAddresses": {
"@id": "pan:ip_addresses",
"@container": "@set",
"@type": "xsd:string"
},
"isIsolated": {
"@id": "pan:is_isolated",
"@type": "xsd:string"
},
"keyword": {
"@id": "pan:keyword",
"@type": "xsd:string"
},
"lastSeen": {
"@id": "pan:last_seen",
"@type": "xsd:integer"
},
"mitreTacticsIdsAndNames": {
"@id": "pan:mitre_tactics_ids_and_names",
"@container": "@set",
"@type": "xsd:string"
},
"mitreTechniquesIdsAndNames": {
"@id": "pan:mitre_techniques_ids_and_names",
"@container": "@set",
"@type": "xsd:string"
},
"modificationTime": {
"@id": "schema:dateModified",
"@type": "xsd:integer"
},
"name": {
"@id": "schema:name",
"@type": "xsd:string"
},
"operatingSystem": {
"@id": "pan:operating_system",
"@type": "xsd:string"
},
"operator": {
"@id": "pan:operator",
"@type": "xsd:string"
},
"osType": {
"@id": "pan:os_type",
"@type": "xsd:string"
},
"reason": {
"@id": "pan:reason",
"@type": "xsd:string"
},
"resolutionStatus": {
"@id": "pan:resolution_status",
"@type": "xsd:string"
},
"result": {
"@id": "pan:result",
"@type": "xsd:string"
},
"riskScore": {
"@id": "pan:risk_score",
"@type": "xsd:decimal"
},
"scanStatus": {
"@id": "pan:scan_status",
"@type": "xsd:string"
},
"severity": {
"@id": "pan:severity",
"@type": "xsd:string"
},
"source": {
"@id": "pan:source",
"@type": "xsd:string"
},
"sources": {
"@id": "pan:sources",
"@container": "@set",
"@type": "xsd:string"
},
"starred": {
"@id": "pan:starred",
"@type": "xsd:boolean"
},
"status": {
"@id": "pan:status",
"@type": "xsd:string"
},
"subType": {
"@id": "pan:sub_type",
"@type": "xsd:string"
},
"tags": {
"@id": "pan:tags",
"@container": "@set",
"@type": "xsd:string"
},
"timestamp": {
"@id": "pan:timestamp",
"@type": "xsd:integer"
},
"userName": {
"@id": "pan:user_name",
"@type": "xsd:string"
},
"users": {
"@id": "pan:users",
"@container": "@set",
"@type": "xsd:string"
},
"value": "pan:value",
"xdrUrl": {
"@id": "pan:xdr_url",
"@type": "xsd:string"
}
}
}