OCSF
An open security event schema standard jointly initiated by vendors including AWS, Splunk, and CrowdStrike. It abstracts security events into core categories such as authentication, network activity, and process activity, and defines standardized fields for normalizing security data across vendors.
Timeline (last 90 days)
Atlassian partnered with Databricks to build a security lakehouse system based on OCSF.
OCSF was jointly initiated by vendors including AWS, Splunk and CrowdStrike, with the goal of defining an open, extensible security event schema.
OCSF abstracts security events into core categories such as authentication, network activity, process activity, file activity and vulnerability findings.
Atlassian added transformation logic to its data ingestion pipeline, mapping raw logs into OCSF format before writing them to Delta Lake tables in Databricks.
As an open schema, OCSF is gaining support from more and more vendors.
OCSF mapping requires upfront investment, and maintaining data pipelines also requires specialized engineering capabilities; for enterprises with smaller security teams, directly adopting a managed SIEM may still be the more pragmatic choice.
All Facts (6)
OCSF was jointly initiated by vendors including AWS, Splunk and CrowdStrike, with the goal of defining an open, extensible security event schema.
50%UnverifiedOCSF abstracts security events into core categories such as authentication, network activity, process activity, file activity and vulnerability findings.
50%UnverifiedAtlassian added transformation logic to its data ingestion pipeline, mapping raw logs into OCSF format before writing them to Delta Lake tables in Databricks.
50%UnverifiedAs an open schema, OCSF is gaining support from more and more vendors.
50%UnverifiedOCSF mapping requires upfront investment, and maintaining data pipelines also requires specialized engineering capabilities; for enterprises with smaller security teams, directly adopting a managed SIEM may still be the more pragmatic choice.
50%UnverifiedAtlassian partnered with Databricks to build a security lakehouse system based on OCSF.
50%