Add Common Process Identifier (CPID) field to process

UUID attribute created for cpid. Attribute added to the process object. Reference feature used to link to CPID specification. Signed-off-by: Mitchell Wasson <[email protected]>
ocsf · Nov 12, 2024 · e886ad2 · e886ad2
1 parent befe972
commit e886ad2
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -68,6 +68,7 @@ Thankyou! -->
     1. Added `altitude_ceiling`, `altitude_floor`, `geodetic_altitude`, `aerial_height`, `horizontal_accuracy`, `pressure_altitude`, `radius`, `speed`, `track_direction`, and `vertical_speed` all to support `operating_area` and `unmanned_aerial_system` objects. #1169 
     1. Added `variable_name` and `variable_value` as `long_string`. #1228
     1. Added `imei_list` as an array `string_t`. #1225
+    1. Added `cpid` as a `uuid_t`. #1246
 * #### Objects
     1. Added `environment_variable` object. #1172
     1. Added `advisory` object. #1176
@@ -110,6 +111,7 @@ Thankyou! -->
     1. Added `geodetic_altitude`, `height`, `horizontal_accuracy`, and `pressure_altitude` to `location`. #1169
     1. Added `location` to `managed_entity`. #1169
     1. Added `imei_list` to the `device` object. #1225
+    1. Added `cpid` to the `process` object. `cpid` added to process identification `at_least_one` constraint. #1246
 
 ### Bugfixes
 1. Added sibling definition to `confidence_id` in dictionary, accurately associating `confidence` as its sibling. #1180

diff --git a/dictionary.json b/dictionary.json
@@ -1168,6 +1168,13 @@
       "description": "The Common Platform Enumeration (CPE) name as described by (<a target='_blank' href='https://nvd.nist.gov/products/cpe'>NIST</a>) For example: <code>cpe:/a:apple:safari:16.2</code>.",
       "type": "string_t"
     },
+    "cpid": {
+      "caption": "Common Process Identifier",
+      "source": "cpid",
+      "references": [{"url": "https://github.com/ocsf/ocsf-docs/pull/45/files", "description": "OCSF Common Process Identifier (CPID) Specification"}],
+      "description": "A unique process identifier that can be deterministically assigned by multiple system data producers.",
+      "type": "uuid_t"
+    },
     "cpu_bits": {
       "caption": "CPU Bits",
       "description": "The cpu architecture, the number of bits used for addressing in memory. For example: <code>32</code> or <code>64</code>.",

diff --git a/objects/process.json b/objects/process.json
@@ -14,6 +14,9 @@
     "cmd_line": {
       "requirement": "recommended"
     },
+    "cpid":{
+      "requirement": "recommended"
+    },
     "created_time": {
       "description": "The time when the process was created/started.",
       "requirement": "recommended"
@@ -80,7 +83,8 @@
   "constraints": {
     "at_least_one": [
       "pid",
-      "uid"
+      "uid",
+      "cpid"
     ]
   }
 }