Process Event
Access Control Administration Event
Access Control Event
Access Denied Event
Access Granted Event
Access Mediation Event
Add User to Group Event
Application Deletion Event
Application Disable Event
Application Enable Event
Application Event
Application Installation Event
Application Layer Event
Application Restart Event
Application Start Event
Application Stop Event
Application Update Event
Assign Privileges to Group Event
Authentication Event
Authorization Event
Compute Device Event
DHCP Ack Event
DHCP Discover Event
DHCP Event
DHCP Inform Event
DHCP Lease Expire Event
DHCP Nak Event
DHCP Offer Event
DHCP Release Event
DHCP Request Event
DNS Event
DNS Query Event
DNS Response Event
Detection Event
Digital Event
Email Event
Email Receive Event
Email Scan Event
Email Send Event
Event Log Archive Event
Event Log Clear Event
Event Log Delete Event
Event Log Disable Event
Event Log Enable Event
Event Log Event
Event Log Export Event
Event Log Restart Event
Event Log Rotate Event
Event Log Start Event
Event Log Stop Event
Eviction Event
FTP Delete Event
FTP Event
FTP Get Event
FTP List Event
FTP Poll Event
FTP Put Event
FTP Rename Event
File Access Event
File Copy Event
File Creation Event
File Decryption Event
File Deletion Event
File Encryption Event
File Event
File Get Attributes Event
File Get Permissions Event
File Mount Event
File Renaming Event
File Set Attributes Event
File Set Permissions Event
File Unmount Event
File Update Event
Group Creation Event
Group Deletion Event
Group Management Event
HTTP CONNECT Event
HTTP DELETE Event
HTTP Event
HTTP GET Event
HTTP HEAD Event
HTTP OPTIONS Event
HTTP POST Event
HTTP PUT Event
HTTP Request Event
HTTP Response Event
HTTP TRACE Event
Hardening Event
Hardware Device Bind Event
Hardware Device Connection Event
Hardware Device Disabled Event
Hardware Device Disconnection Event
Hardware Device Enabled Event
Hardware Device Event
Hardware Device Move Event
Hardware Device State Event
Hardware Device Unbind Event
Hardware Device Update Event
Input Device Event
Isolation Event
Kernel Event
Kernel Module Event
Kernel Module Load Event
Kernel Module Unload Event
Load Library Event
Logoff Event
Logon Event
Memory Allocation Event
Memory Deletion Event
Memory Device Event
Memory Event
Memory Map Event
Memory Modification Event
Memory Read Event
Memory Write Event
NTP Broadcast Event
NTP Client Synchronization Event
NTP Control Message Event
NTP Event
NTP Server Response Event
NTP Symmetric Active Exchange Event
NTP Symmetric Passive Exchange Event
Network Connection Close Event
Network Connection Event
Network Connection Fail Event
Network Connection Listen Event
Network Connection Open Event
Network Connection Refuse Event
Network Connection Reset Event
Network Device Event
Network Event
Output Device Event
Peripheral Device Event
Permission Granting Event
Permission Revoking Event
Power and Thermal Device Event
Pre-Authentication Event
Process Access Event
Process Creation Event
Process Event
Process Set User ID Event
Process Termination Event
RDP Connect Request Event
RDP Connect Response Event
RDP Event
RDP Initial Request Event
RDP Initial Response Event
RDP TLS Handshake Event
Remove User from Group Event
Restoration Event
Revoke Privileges from Group Event
SMB Event
SMB File Create Event
SMB File Open Event
SMB File Open If Event
SMB File Overwrite Event
SMB File Overwrite If Event
SMB File Supersede Event
SSH Connection Close Event
SSH Connection Fail Event
SSH Connection Open Event
SSH Connection Refuse Event
SSH Connection Reset Event
SSH Event
SSH Listen Event
Scheduled Job Creation Event
Scheduled Job Deletion Event
Scheduled Job Disable Event
Scheduled Job Enable Event
Scheduled Job Event
Scheduled Job Start Event
Scheduled Job Update Event
Security Event
Service Deletion Event
Service Disable Event
Service Enable Event
Service Event
Service Installation Event
Service Restart Event
Service Start Event
Service Stop Event
Service Update Event
Storage Device Event
System Call Event
TCP Event
Transport Layer Event
Tunnel Close Event
Tunnel Event
Tunnel Open Event
Tunnel Renew Event
UDP Event
Unload Library Event
User Account Attach Policy Event
User Account Creation Event
User Account Deletion Event
User Account Detach Policy Event
User Account Disable Event
User Account Enable Event
User Account Event
User Account Lock Event
User Account MFA Disable Event
User Account MFA Enable Event
User Account Password Change Event
User Account Password Reset Event
User Account Update Event
Windows Registry Event
Windows Registry Key Creation Event
Windows Registry Key Deletion Event
Windows Registry Key Event
Windows Registry Key Export Event
Windows Registry Key Import Event
Windows Registry Key Read Event
Windows Registry Key Renaming Event
Windows Registry Key Restore Event
Windows Registry Key Set Security Event
Windows Registry Key Update Event
Windows Registry Value Deletion Event
Windows Registry Value Event
Windows Registry Value Get Event
Windows Registry Value Set Event
Windows Registry Value Update Event
Properties
id: d3f:ProcessEvent
- name
- Process Event
- definition
- An event capturing lifecycle transitions, interactions, or activities of computer processes, including their creation, termination, and inter-process communication.
- see also
- https://schema.ocsf.io/1.3.0/classes/process_activity
Neighbors
graph LR;
ProcessEvent["Process Event"] -->
| has-participant | Process["Process"];
class ProcessEvent EventNode;
class Process ArtifactNode;
click ProcessEvent href "/event/d3f:ProcessEvent";
click Process href "/dao/artifact/d3f:Process";ProcessEvent["Process Event"] -->
| has-participant | ChildProcess["Child Process"];
class ProcessEvent EventNode;
class ChildProcess ArtifactNode;
click ProcessEvent href "/event/d3f:ProcessEvent";
click ChildProcess href "/dao/artifact/d3f:ChildProcess";ProcessEvent["Process Event"] -->
| has-participant | OperatingSystemProcess["Operating System Process"];
class ProcessEvent EventNode;
class OperatingSystemProcess ArtifactNode;
click ProcessEvent href "/event/d3f:ProcessEvent";
click OperatingSystemProcess href "/dao/artifact/d3f:OperatingSystemProcess";ProcessEvent["Process Event"] -->
| has-participant | ParentProcess["Parent Process"];
class ProcessEvent EventNode;
class ParentProcess ArtifactNode;
click ProcessEvent href "/event/d3f:ProcessEvent";
click ParentProcess href "/dao/artifact/d3f:ParentProcess";ProcessEvent["Process Event"] -->
| has-participant | UserProcess["User Process"];
class ProcessEvent EventNode;
class UserProcess ArtifactNode;
click ProcessEvent href "/event/d3f:ProcessEvent";
click UserProcess href "/dao/artifact/d3f:UserProcess";ProcessEvent["Process Event"] -->
| has-participant | ApplicationProcess["Application Process"];
class ProcessEvent EventNode;
class ApplicationProcess ArtifactNode;
click ProcessEvent href "/event/d3f:ProcessEvent";
click ApplicationProcess href "/dao/artifact/d3f:ApplicationProcess";ProcessEvent["Process Event"] -->
| has-participant | LocalAuthenticationService["Local Authentication Service"];
class ProcessEvent EventNode;
class LocalAuthenticationService ArtifactNode;
click ProcessEvent href "/event/d3f:ProcessEvent";
click LocalAuthenticationService href "/dao/artifact/d3f:LocalAuthenticationService";ProcessEvent["Process Event"] -->
| has-participant | LocalAuthorizationService["Local Authorization Service"];
class ProcessEvent EventNode;
class LocalAuthorizationService ArtifactNode;
click ProcessEvent href "/event/d3f:ProcessEvent";
click LocalAuthorizationService href "/dao/artifact/d3f:LocalAuthorizationService";ProcessEvent["Process Event"] -->
| has-participant | SystemInitProcess["System Init Process"];
class ProcessEvent EventNode;
class SystemInitProcess ArtifactNode;
click ProcessEvent href "/event/d3f:ProcessEvent";
click SystemInitProcess href "/dao/artifact/d3f:SystemInitProcess";ProcessEvent["Process Event"] -->
| has-participant | ScheduledJob["Scheduled Job"];
class ProcessEvent EventNode;
class ScheduledJob ArtifactNode;
click ProcessEvent href "/event/d3f:ProcessEvent";
click ScheduledJob href "/dao/artifact/d3f:ScheduledJob";ProcessEvent["Process Event"] -->
| has-participant | ContainerProcess["Container Process"];
class ProcessEvent EventNode;
class ContainerProcess ArtifactNode;
click ProcessEvent href "/event/d3f:ProcessEvent";
click ContainerProcess href "/dao/artifact/d3f:ContainerProcess";ProcessEvent["Process Event"] -->
| has-participant | ScriptApplicationProcess["Script Application Process"];
class ProcessEvent EventNode;
class ScriptApplicationProcess ArtifactNode;
click ProcessEvent href "/event/d3f:ProcessEvent";
click ScriptApplicationProcess href "/dao/artifact/d3f:ScriptApplicationProcess";ProcessEvent["Process Event"] -->
| has-participant | ServiceApplicationProcess["Service Application Process"];
class ProcessEvent EventNode;
class ServiceApplicationProcess ArtifactNode;
click ProcessEvent href "/event/d3f:ProcessEvent";
click ServiceApplicationProcess href "/dao/artifact/d3f:ServiceApplicationProcess";ProcessEvent["Process Event"] -->
| has-participant | AuthenticationService["Authentication Service"];
class ProcessEvent EventNode;
class AuthenticationService ArtifactNode;
click ProcessEvent href "/event/d3f:ProcessEvent";
click AuthenticationService href "/dao/artifact/d3f:AuthenticationService";ProcessEvent["Process Event"] -->
| has-participant | AuthorizationService["Authorization Service"];
class ProcessEvent EventNode;
class AuthorizationService ArtifactNode;
click ProcessEvent href "/event/d3f:ProcessEvent";
click AuthorizationService href "/dao/artifact/d3f:AuthorizationService";ProcessEvent["Process Event"] -->
| has-participant | NetworkService["Network Service"];
class ProcessEvent EventNode;
class NetworkService ArtifactNode;
click ProcessEvent href "/event/d3f:ProcessEvent";
click NetworkService href "/dao/artifact/d3f:NetworkService";ProcessEvent["Process Event"] -->
| has-participant | DirectoryService["Directory Service"];
class ProcessEvent EventNode;
class DirectoryService ArtifactNode;
click ProcessEvent href "/event/d3f:ProcessEvent";
click DirectoryService href "/dao/artifact/d3f:DirectoryService";ProcessEvent["Process Event"] -->
| has-participant | FileShareService["File Share Service"];
class ProcessEvent EventNode;
class FileShareService ArtifactNode;
click ProcessEvent href "/event/d3f:ProcessEvent";
click FileShareService href "/dao/artifact/d3f:FileShareService";ProcessEvent["Process Event"] -->
| has-participant | MailService["Mail Service"];
class ProcessEvent EventNode;
class MailService ArtifactNode;
click ProcessEvent href "/event/d3f:ProcessEvent";
click MailService href "/dao/artifact/d3f:MailService";ProcessEvent["Process Event"] -->
| has-participant | RemoteAuthenticationService["Remote Authentication Service"];
class ProcessEvent EventNode;
class RemoteAuthenticationService ArtifactNode;
click ProcessEvent href "/event/d3f:ProcessEvent";
click RemoteAuthenticationService href "/dao/artifact/d3f:RemoteAuthenticationService";ProcessEvent["Process Event"] -->
| has-participant | RemoteAuthorizationService["Remote Authorization Service"];
class ProcessEvent EventNode;
class RemoteAuthorizationService ArtifactNode;
click ProcessEvent href "/event/d3f:ProcessEvent";
click RemoteAuthorizationService href "/dao/artifact/d3f:RemoteAuthorizationService";ProcessEvent["Process Event"] -->
| has-participant | MessageTransferAgent["Message Transfer Agent"];
class ProcessEvent EventNode;
class MessageTransferAgent ArtifactNode;
click ProcessEvent href "/event/d3f:ProcessEvent";
click MessageTransferAgent href "/dao/artifact/d3f:MessageTransferAgent";