cyber:ObservedData (NIEM Wayfarer 5.1)

cyber:ObservedData (cyber:ObservedDataType)

An information about a cyber security entity, such as a file, system, or network, that has been observed at a particular time

View UML for type: cyber:ObservedDataType

cyber:ObservedData is contained within these types:

cyber:ObservedData can contain:

cyber:CyberObservableObject
An action or stateful property that occurs, or may occur, in the operational cyber environment
cyber:FirstObservedDate
A beginning date of the time window during which the data related to the incident was seen
cyber:LastObservedDate
An end date of the time window during which the data related to the incident was seen
cyber:ObservedQuantity
A count of the times that each cyber-observable object was seen

cyber:ObservedData can be contained in any of these elements:

cyber:BreachObservedData (of cyber:BreachObservedDataType)
A data related to information that has been observed on a cybersecurity related entity
cyber:CompromisedCommunication (of cyber:CompromisedCommunicationType)
An information about compromised communication between systems

Everything cyber:ObservedData can contain:

via cyber:ObservedDataType

cyber:CyberObservableObject An action or stateful property that occurs, or may occur, in the operational cyber environment
cyber:FirstObservedDate A beginning date of the time window during which the data related to the incident was seen
cyber:LastObservedDate An end date of the time window during which the data related to the incident was seen
cyber:ObservedQuantity A count of the times that each cyber-observable object was seen

via structures:ObjectType

Nothing